Veeam Backup And Replication
13 CVEs affecting Veeam Backup And Replication. Latest disclosed: 2026-06-09. Critical: 5, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-21708 | Critical | 9.9 | 2026-03-12 | A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. |
CVE-2026-21669 | Critical | 9.9 | 2026-03-12 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. |
CVE-2026-21667 | Critical | 9.9 | 2026-03-12 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. |
CVE-2026-21666 | Critical | 9.9 | 2026-03-12 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. |
CVE-2025-48983 | Critical | 9.9 | 2025-10-31 | A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authe… |
CVE-2026-21672 | High | 8.8 | 2026-03-12 | A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers. |
CVE-2026-21668 | High | 8.8 | 2026-03-12 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. |
CVE-2025-48984 | High | 8.8 | 2025-10-31 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. |
CVE-2026-21670 | High | 7.7 | 2026-03-12 | A vulnerability allowing a low-privileged user to extract saved SSH credentials. |
CVE-2026-21709 | Medium | 6.7 | 2026-04-17 | A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement. |
CVE-2026-44963 | | 2026-06-09 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. | |
CVE-2026-32997 | | 2026-05-28 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server. | |
CVE-2026-32996 | | 2026-05-28 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. |