Search
Find a vulnerability
Search criteria
137 vulnerabilities by VEEAM
CERTFR-2026-AVI-1426
Vulnerability from certfr_avis - Published: 2026-10-30 - Updated: 2026-10-30
De multiples vulnérabilités ont été découvertes dans Veeam Management Pack. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Veeam | Veeam Management Pack | Veeam Management Pack pour Microsoft System Center versions antérieures à 13.1 (build 13.1.0.334) |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Veeam Management Pack pour Microsoft System Center versions ant\u00e9rieures \u00e0 13.1 (build 13.1.0.334)",
"product": {
"name": "Veeam Management Pack",
"vendor": {
"name": "Veeam",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-107238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107238"
},
{
"name": "CVE-2026-107239",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107239"
},
{
"name": "CVE-2023-22793",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22793"
}
],
"initial_release_date": "2026-10-30T00:00:00",
"last_revision_date": "2026-10-30T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1426",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Veeam Management Pack. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Veeam Management Pack",
"vendor_advisories": [
{
"published_at": "2026-10-29",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4961",
"url": "https://www.veeam.com/kb4961"
}
]
}
CERTFR-2026-AVI-1411
Vulnerability from certfr_avis - Published: 2026-10-29 - Updated: 2026-10-29
De multiples vulnérabilités ont été découvertes dans Veeam Backup for Microsoft 365. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Veeam | Veeam Backup for Microsoft 365 | Veeam Backup for Microsoft 365 versions 8.x postérieures à 8.6.0.1102 et antérieures à 8.6.0.5011 | ||
| Veeam | Veeam Backup for Microsoft 365 | Veeam Backup for Microsoft 365 versions 8.x antérieures à 8.6.0.1102 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Veeam Backup for Microsoft 365 versions 8.x post\u00e9rieures \u00e0 8.6.0.1102 et ant\u00e9rieures \u00e0 8.6.0.5011",
"product": {
"name": "Veeam Backup for Microsoft 365",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Backup for Microsoft 365 versions 8.x ant\u00e9rieures \u00e0 8.6.0.1102",
"product": {
"name": "Veeam Backup for Microsoft 365",
"vendor": {
"name": "Veeam",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-64394",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64394"
},
{
"name": "CVE-2026-106077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106077"
},
{
"name": "CVE-2026-106076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106076"
},
{
"name": "CVE-2026-106078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106078"
}
],
"initial_release_date": "2026-10-29T00:00:00",
"last_revision_date": "2026-10-29T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1411",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Veeam Backup for Microsoft 365. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Veeam Backup for Microsoft 365",
"vendor_advisories": [
{
"published_at": "2026-10-28",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4962",
"url": "https://www.veeam.com/kb4962"
}
]
}
CERTFR-2026-AVI-1399
Vulnerability from certfr_avis - Published: 2026-10-28 - Updated: 2026-10-28
De multiples vulnérabilités ont été découvertes dans les produits Veeam. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Veeam | Veeam Backup & Replication | Veeam Backup & Replication versions 13.0.x antérieures à 13.0.3 (build 13.0.3.63) | ||
| Veeam | Veeam Agent | Veeam Agent pour Linux versions antérieures à 13.1.2 (build 13.1.2.11) | ||
| Veeam | Veeam Backup | Veeam Backup pour Microsoft 365 versions antérieures à 8.6 Patch 1 (build 8.6.0.5011) | ||
| Veeam | Veeam ONE | Veeam ONE versions antérieures à 13.1 P1 (build 13.1.0.7940) | ||
| Veeam | Veeam Backup & Replication | Veeam Backup & Replication versions 13.1.x antérieures à 13.1.2 (build 13.1.2.57) |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Veeam Backup \u0026 Replication versions 13.0.x ant\u00e9rieures \u00e0 13.0.3 (build 13.0.3.63)",
"product": {
"name": "Veeam Backup \u0026 Replication",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Agent pour Linux versions ant\u00e9rieures \u00e0 13.1.2 (build 13.1.2.11)",
"product": {
"name": "Veeam Agent",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Backup pour Microsoft 365 versions ant\u00e9rieures \u00e0 8.6 Patch 1 (build 8.6.0.5011)",
"product": {
"name": "Veeam Backup",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam ONE versions ant\u00e9rieures \u00e0 13.1 P1 (build 13.1.0.7940)",
"product": {
"name": "Veeam ONE",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Backup \u0026 Replication versions 13.1.x ant\u00e9rieures \u00e0 13.1.2 (build 13.1.2.57)",
"product": {
"name": "Veeam Backup \u0026 Replication",
"vendor": {
"name": "Veeam",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-108142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-108142"
},
{
"name": "CVE-2025-64394",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64394"
},
{
"name": "CVE-2026-106077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106077"
},
{
"name": "CVE-2026-105477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105477"
},
{
"name": "CVE-2026-106076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106076"
},
{
"name": "CVE-2026-106078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106078"
},
{
"name": "CVE-2026-108141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-108141"
},
{
"name": "CVE-2026-108140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-108140"
},
{
"name": "CVE-2026-107671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107671"
}
],
"initial_release_date": "2026-10-28T00:00:00",
"last_revision_date": "2026-10-28T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1399",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-28T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Veeam. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Veeam",
"vendor_advisories": [
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4957",
"url": "https://www.veeam.com/kb4957"
},
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4951",
"url": "https://www.veeam.com/kb4951"
},
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4948",
"url": "https://www.veeam.com/kb4948"
}
]
}
CERTFR-2026-AVI-1278
Vulnerability from certfr_avis - Published: 2026-10-07 - Updated: 2026-10-07
De multiples vulnérabilités ont été découvertes dans les produits Veeam. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Veeam | Veeam Backup & Replication | Backup & Replication versions antérieures à 12.3.2 P4 (build 12.3.2.4934) |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Backup \u0026 Replication versions ant\u00e9rieures \u00e0 12.3.2 P4 (build 12.3.2.4934)",
"product": {
"name": "Veeam Backup \u0026 Replication",
"vendor": {
"name": "Veeam",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-64393",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64393"
},
{
"name": "CVE-2025-64392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64392"
},
{
"name": "CVE-2026-93026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93026"
}
],
"initial_release_date": "2026-10-07T00:00:00",
"last_revision_date": "2026-10-07T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1278",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-07T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Veeam. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection de code indirecte \u00e0 distance (XSS).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Veeam",
"vendor_advisories": [
{
"published_at": "2026-10-06",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4934",
"url": "https://www.veeam.com/kb4934"
}
]
}
CERTFR-2026-AVI-1154
Vulnerability from certfr_avis - Published: 2026-09-10 - Updated: 2026-09-10
De multiples vulnérabilités ont été découvertes dans les produits Veeam. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Veeam | Veeam Plug-In | Veeam Plug-In pour Xen versions antérieures à 13.1.0.295 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour AWS versions 13.11.x antérieures à 13.11.0.100 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour HPE Morpheus VM Essentials versions antérieures à 13.1.2.31 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour Scale Computing HyperCore versions 13.4.x antérieures à 13.4.0.327 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour oVirt KVM versions antérieures à 13.7.3.26 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour KubeVirt versions antérieures à 13.1.0.428 | ||
| Veeam | Veeam Backup | Veeam Backup pour Salesforce versions antérieures à 3.2.1.4038 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour Proxmox VE versions antérieures à 13.3.3.23 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour Microsoft Azure versions 13.9.x antérieures à 13.9.0.354 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour AWS versions antérieures à 13.10.2.21 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour oVirt KVM versions 13.8.x antérieures à 13.8.0.359 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour Scale Computing HyperCore versions antérieures à 13.3.2.30 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour HPE Morpheus VM Essentials versions 13.2.x antérieures à 13.2.0.160 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour Microsoft Azure versions antérieures à 13.8.5.16 | ||
| Veeam | Veeam Plug-In | Veeam Plug-In pour Proxmox VE versions 13.4.x antérieures à 13.4.0.300 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Veeam Plug-In pour Xen versions ant\u00e9rieures \u00e0 13.1.0.295",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour AWS versions 13.11.x ant\u00e9rieures \u00e0 13.11.0.100",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour HPE Morpheus VM Essentials versions ant\u00e9rieures \u00e0 13.1.2.31",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour Scale Computing HyperCore versions 13.4.x ant\u00e9rieures \u00e0 13.4.0.327",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour oVirt KVM versions ant\u00e9rieures \u00e0 13.7.3.26",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour KubeVirt versions ant\u00e9rieures \u00e0 13.1.0.428",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Backup pour Salesforce versions ant\u00e9rieures \u00e0 3.2.1.4038",
"product": {
"name": "Veeam Backup",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour Proxmox VE versions ant\u00e9rieures \u00e0 13.3.3.23",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour Microsoft Azure versions 13.9.x ant\u00e9rieures \u00e0 13.9.0.354",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour AWS versions ant\u00e9rieures \u00e0 13.10.2.21",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour oVirt KVM versions 13.8.x ant\u00e9rieures \u00e0 13.8.0.359",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour Scale Computing HyperCore versions ant\u00e9rieures \u00e0 13.3.2.30",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour HPE Morpheus VM Essentials versions 13.2.x ant\u00e9rieures \u00e0 13.2.0.160",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour Microsoft Azure versions ant\u00e9rieures \u00e0 13.8.5.16",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Plug-In pour Proxmox VE versions 13.4.x ant\u00e9rieures \u00e0 13.4.0.300",
"product": {
"name": "Veeam Plug-In",
"vendor": {
"name": "Veeam",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [],
"initial_release_date": "2026-09-10T00:00:00",
"last_revision_date": "2026-09-10T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1154",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Veeam. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Veeam",
"vendor_advisories": [
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4925",
"url": "https://www.veeam.com/kb4925"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4919",
"url": "https://www.veeam.com/kb4919"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4923",
"url": "https://www.veeam.com/kb4923"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4922",
"url": "https://www.veeam.com/kb4922"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4917",
"url": "https://www.veeam.com/kb4917"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4921",
"url": "https://www.veeam.com/kb4921"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4926",
"url": "https://www.veeam.com/kb4926"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4920",
"url": "https://www.veeam.com/kb4920"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4924",
"url": "https://www.veeam.com/kb4924"
}
]
}
CERTFR-2026-AVI-1080
Vulnerability from certfr_avis - Published: 2026-08-26 - Updated: 2026-08-26
De multiples vulnérabilités ont été découvertes dans les produits Veeam. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Veeam | Veeam ONE | Veeam ONE versions 13.x antérieures à 13.0.2 Patch 1 | ||
| Veeam | Veeam Backup & Replication | Veeam Backup & Replication versions 13.x antérieures à 13.0.3 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Veeam ONE versions 13.x ant\u00e9rieures \u00e0 13.0.2 Patch 1",
"product": {
"name": "Veeam ONE",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Veeam Backup \u0026 Replication versions 13.x ant\u00e9rieures \u00e0 13.0.3",
"product": {
"name": "Veeam Backup \u0026 Replication",
"vendor": {
"name": "Veeam",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-58070",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58070"
},
{
"name": "CVE-2026-65641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65641"
}
],
"initial_release_date": "2026-08-26T00:00:00",
"last_revision_date": "2026-08-26T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1080",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Veeam. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Veeam",
"vendor_advisories": [
{
"published_at": "2026-08-25",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4905",
"url": "https://www.veeam.com/kb4905"
},
{
"published_at": "2026-08-25",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4902",
"url": "https://www.veeam.com/kb4902"
}
]
}
CERTFR-2026-AVI-0968
Vulnerability from certfr_avis - Published: 2026-08-05 - Updated: 2026-08-05
De multiples vulnérabilités ont été découvertes dans les produits Veeam. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Veeam | Veeam ONE | Veeam ONE versions antérieures à 13.1.0.7034 | ||
| Veeam | Veeam Service Provider Console | Service Provider Console versions antérieures à 9.3.0.35057 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Veeam ONE versions ant\u00e9rieures \u00e0 13.1.0.7034",
"product": {
"name": "Veeam ONE",
"vendor": {
"name": "Veeam",
"scada": false
}
}
},
{
"description": "Service Provider Console versions ant\u00e9rieures \u00e0 9.3.0.35057",
"product": {
"name": "Veeam Service Provider Console",
"vendor": {
"name": "Veeam",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-64633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64633"
},
{
"name": "CVE-2026-58067",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58067"
},
{
"name": "CVE-2026-58072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58072"
},
{
"name": "CVE-2026-58075",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58075"
},
{
"name": "CVE-2026-58073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58073"
},
{
"name": "CVE-2026-58074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58074"
},
{
"name": "CVE-2026-58071",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58071"
},
{
"name": "CVE-2026-64630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64630"
},
{
"name": "CVE-2026-64634",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64634"
},
{
"name": "CVE-2026-64631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64631"
}
],
"initial_release_date": "2026-08-05T00:00:00",
"last_revision_date": "2026-08-05T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0968",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Veeam. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Veeam",
"vendor_advisories": [
{
"published_at": "2026-07-29",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4892",
"url": "https://www.veeam.com/kb4892"
},
{
"published_at": "2026-08-04",
"title": "Bulletin de s\u00e9curit\u00e9 Veeam kb4893",
"url": "https://www.veeam.com/kb4893"
}
]
}
CVE-2026-107238 (GCVE-0-2026-107238)
Vulnerability from cvelistv5 – Published: 2026-10-29 22:55 – Updated: 2026-10-30 17:02
VLAI
EPSS
VEX
Summary
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 17:02 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4961 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Management Pack for Microsoft System Center |
Affected:
9.0 , < 13.1.0.334
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107238",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T17:02:46.617903Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T17:02:59.654Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Management Pack for Microsoft System Center",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.1.0.334",
"status": "affected",
"version": "9.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T22:55:37.666Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4961"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-107238",
"datePublished": "2026-10-29T22:55:37.666Z",
"dateReserved": "2026-10-07T15:00:00.550Z",
"dateUpdated": "2026-10-30T17:02:59.654Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107239 (GCVE-0-2026-107239)
Vulnerability from cvelistv5 – Published: 2026-10-29 22:55 – Updated: 2026-10-30 17:03
VLAI
EPSS
VEX
Summary
A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 17:03 UTC
CWE
- CWE-23 - Relative Path Traversal
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4961 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Management Pack for Microsoft System Center |
Affected:
9.0 , < 13.1.0.334
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107239",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T17:03:16.890803Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T17:03:28.384Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Management Pack for Microsoft System Center",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.1.0.334",
"status": "affected",
"version": "9.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:L/SA:L",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-23",
"description": "CWE-23 Relative Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T22:55:37.649Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4961"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-107239",
"datePublished": "2026-10-29T22:55:37.649Z",
"dateReserved": "2026-10-07T15:00:00.550Z",
"dateUpdated": "2026-10-30T17:03:28.384Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-22793 (GCVE-0-2023-22793)
Vulnerability from cvelistv5 – Published: 2026-10-29 22:55 – Updated: 2026-10-30 17:04
VLAI
EPSS
VEX
Summary
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 17:03 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4961 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Management Pack for Microsoft System Center |
Affected:
9.0 , < 13.1.0.334
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-22793",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T17:03:57.174327Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T17:04:18.232Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Management Pack for Microsoft System Center",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.1.0.334",
"status": "affected",
"version": "9.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T22:55:37.594Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4961"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2023-22793",
"datePublished": "2026-10-29T22:55:37.594Z",
"dateReserved": "2023-01-06T15:38:54.287Z",
"dateUpdated": "2026-10-30T17:04:18.232Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-64394 (GCVE-0-2025-64394)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 17:46
VLAI
EPSS
VEX
Summary
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 17:46 UTC
CWE
- CWE-1386 - Insecure Operation on Windows Junction / Mount Point
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4957 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup for Microsoft 365 |
Affected:
8.0 , ≤ 8.6.0.1102
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-64394",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T17:46:39.362036Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T17:46:50.609Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup for Microsoft 365",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "8.6.0.1102",
"status": "affected",
"version": "8.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1386",
"description": "CWE-1386 Insecure Operation on Windows Junction / Mount Point",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.979Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4957"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2025-64394",
"datePublished": "2026-10-27T16:16:58.979Z",
"dateReserved": "2025-10-31T15:00:01.447Z",
"dateUpdated": "2026-11-04T17:46:50.609Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108141 (GCVE-0-2026-108141)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 17:55
VLAI
EPSS
VEX
Summary
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 17:53 UTC
CWE
- CWE-22 - Path Traversal
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4948 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup and Replication |
Affected:
13.0 , < 13.0.3
(semver)
Affected: 13.1 , < 13.1.2 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108141",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T17:53:36.630294Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T17:55:52.625Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup and Replication",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.0.3",
"status": "affected",
"version": "13.0",
"versionType": "semver"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.971Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4948"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-108141",
"datePublished": "2026-10-27T16:16:58.971Z",
"dateReserved": "2026-10-09T15:00:00.772Z",
"dateUpdated": "2026-11-04T17:55:52.625Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106078 (GCVE-0-2026-106078)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 17:57
VLAI
EPSS
VEX
Summary
A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 17:56 UTC
CWE
- CWE-347 - Improper Verification of Cryptographic Signature
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4957 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup for Microsoft 365 |
Affected:
8.0 , ≤ 8.6.0.1102
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106078",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T17:56:52.558730Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T17:57:09.773Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup for Microsoft 365",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "8.6.0.1102",
"status": "affected",
"version": "8.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-347",
"description": "CWE-347 Improper Verification of Cryptographic Signature",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.925Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4957"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-106078",
"datePublished": "2026-10-27T16:16:58.925Z",
"dateReserved": "2026-10-06T15:00:00.655Z",
"dateUpdated": "2026-11-04T17:57:09.773Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107671 (GCVE-0-2026-107671)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 17:57
VLAI
EPSS
VEX
Summary
A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 17:57 UTC
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4951 |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107671",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T17:57:43.420473Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T17:57:56.367Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ONE",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "13.1.0.7233",
"status": "affected",
"version": "13.1",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.921Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4951"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-107671",
"datePublished": "2026-10-27T16:16:58.921Z",
"dateReserved": "2026-10-08T15:00:00.795Z",
"dateUpdated": "2026-11-04T17:57:56.367Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108142 (GCVE-0-2026-108142)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 20:24
VLAI
EPSS
VEX
Summary
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 19:32 UTC
CWE
- CWE-636 - Not Failing Securely ('Failing Open')
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4948 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup and Replication |
Affected:
13.0 , < 13.0.3
(semver)
Affected: 13.1 , < 13.1.2 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108142",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T19:32:13.522690Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T20:24:27.620Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup and Replication",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.0.3",
"status": "affected",
"version": "13.0",
"versionType": "semver"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-636",
"description": "CWE-636 Not Failing Securely (\u0027Failing Open\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.907Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4948"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-108142",
"datePublished": "2026-10-27T16:16:58.907Z",
"dateReserved": "2026-10-09T15:00:00.772Z",
"dateUpdated": "2026-11-04T20:24:27.620Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106077 (GCVE-0-2026-106077)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 20:24
VLAI
EPSS
VEX
Summary
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 19:32 UTC
CWE
- CWE-863 - Incorrect Authorization
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4957 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup for Microsoft 365 |
Affected:
8.0 , ≤ 8.5.0.1014
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106077",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T19:32:12.171777Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T20:24:34.752Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup for Microsoft 365",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "8.5.0.1014",
"status": "affected",
"version": "8.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "CWE-863 Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.905Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4957"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-106077",
"datePublished": "2026-10-27T16:16:58.905Z",
"dateReserved": "2026-10-06T15:00:00.655Z",
"dateUpdated": "2026-11-04T20:24:34.752Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106076 (GCVE-0-2026-106076)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 20:24
VLAI
EPSS
VEX
Summary
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 20:06 UTC
CWE
- CWE-89 - SQL Injection
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4957 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup for Microsoft 365 |
Affected:
8.0 , ≤ 8.5.0.1014
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106076",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T20:06:04.534646Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T20:24:41.531Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup for Microsoft 365",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "8.5.0.1014",
"status": "affected",
"version": "8.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89 SQL Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.882Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4957"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-106076",
"datePublished": "2026-10-27T16:16:58.882Z",
"dateReserved": "2026-10-06T15:00:00.655Z",
"dateUpdated": "2026-11-04T20:24:41.531Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108140 (GCVE-0-2026-108140)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 20:24
VLAI
EPSS
VEX
Summary
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 19:32 UTC
CWE
- CWE-22 - Path Traversal
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4948 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup and Replication |
Affected:
13.0 , < 13.0.3
(semver)
Affected: 13.1 , < 13.1.2 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108140",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T19:32:10.646240Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T20:24:48.343Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup and Replication",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.0.3",
"status": "affected",
"version": "13.0",
"versionType": "semver"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.797Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4948"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-108140",
"datePublished": "2026-10-27T16:16:58.797Z",
"dateReserved": "2026-10-09T15:00:00.772Z",
"dateUpdated": "2026-11-04T20:24:48.343Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105477 (GCVE-0-2026-105477)
Vulnerability from cvelistv5 – Published: 2026-10-27 16:16 – Updated: 2026-11-04 20:24
VLAI
EPSS
VEX
Summary
A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 20:06 UTC
CWE
- CWE-426 - Untrusted Search Path
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4948 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Agent for Linux |
Affected:
13.1 , < 13.1.2
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-105477",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T20:06:01.961458Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T20:24:55.040Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Agent for Linux",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup \u0026 Replication instance are affected."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-426",
"description": "CWE-426 Untrusted Search Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T16:16:58.785Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4948"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-105477",
"datePublished": "2026-10-27T16:16:58.785Z",
"dateReserved": "2026-10-05T15:00:00.728Z",
"dateUpdated": "2026-11-04T20:24:55.040Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-64391 (GCVE-0-2025-64391)
Vulnerability from cvelistv5 – Published: 2026-10-07 08:49 – Updated: 2026-10-07 13:09
VLAI
EPSS
VEX
Summary
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 13:09 UTC
CWE
- CWE-1386 - Insecure Operation on Windows Junction / Mount Point
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4902 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Agent for Windows |
Affected:
0 , < 13.1
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-64391",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T13:09:42.681959Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T13:09:57.619Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Agent for Windows",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1386",
"description": "CWE-1386 Insecure Operation on Windows Junction / Mount Point",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T08:49:13.273Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4902"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2025-64391",
"datePublished": "2026-10-07T08:49:13.273Z",
"dateReserved": "2025-10-31T15:00:01.446Z",
"dateUpdated": "2026-10-07T13:09:57.619Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-64392 (GCVE-0-2025-64392)
Vulnerability from cvelistv5 – Published: 2026-10-07 08:49 – Updated: 2026-10-07 13:10
VLAI
EPSS
VEX
Summary
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 13:10 UTC
CWE
- CWE-79 - Cross-site Scripting (XSS) - Reflected
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/KB4934 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup Enterprise Manager |
Affected:
12 , < 12.3.2.4934
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-64392",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T13:10:40.205872Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T13:10:55.157Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup Enterprise Manager",
"vendor": "Veeam",
"versions": [
{
"lessThan": "12.3.2.4934",
"status": "affected",
"version": "12",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Cross-site Scripting (XSS) - Reflected",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T08:49:07.997Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/KB4934"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2025-64392",
"datePublished": "2026-10-07T08:49:07.997Z",
"dateReserved": "2025-10-31T15:00:01.446Z",
"dateUpdated": "2026-10-07T13:10:55.157Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-93026 (GCVE-0-2026-93026)
Vulnerability from cvelistv5 – Published: 2026-10-07 08:49 – Updated: 2026-10-07 11:31
VLAI
EPSS
VEX
Summary
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 11:31 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/KB4934 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup and Replication |
Affected:
12 , < 12.3.2.4934
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93026",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T11:31:22.141994Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T11:31:29.834Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup and Replication",
"vendor": "Veeam",
"versions": [
{
"lessThan": "12.3.2.4934",
"status": "affected",
"version": "12",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability in Veeam Backup \u0026 Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T08:49:04.201Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/KB4934"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-93026",
"datePublished": "2026-10-07T08:49:04.201Z",
"dateReserved": "2026-09-17T15:00:00.689Z",
"dateUpdated": "2026-10-07T11:31:29.834Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58068 (GCVE-0-2026-58068)
Vulnerability from cvelistv5 – Published: 2026-10-07 08:49 – Updated: 2026-10-07 13:10
VLAI
EPSS
VEX
Summary
This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 13:10 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4902 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Agent for Windows |
Affected:
0 , < 13.1
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58068",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T13:10:11.920054Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T13:10:25.081Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Agent for Windows",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T08:49:00.164Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4902"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-58068",
"datePublished": "2026-10-07T08:49:00.164Z",
"dateReserved": "2026-06-28T15:00:00.720Z",
"dateUpdated": "2026-10-07T13:10:25.081Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58069 (GCVE-0-2026-58069)
Vulnerability from cvelistv5 – Published: 2026-10-07 08:48 – Updated: 2026-10-07 11:31
VLAI
EPSS
VEX
Summary
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 11:30 UTC
CWE
- CWE-22 - Path Traversal
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4902 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup and Replication |
Affected:
12 , ≤ 12.3.2
(semver)
Affected: 13 , ≤ 13.0.3 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58069",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T11:30:48.228149Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T11:31:00.298Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup and Replication",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "12.3.2",
"status": "affected",
"version": "12",
"versionType": "semver"
},
{
"lessThanOrEqual": "13.0.3",
"status": "affected",
"version": "13",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability in Veeam Backup \u0026 Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T08:48:56.246Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4902"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-58069",
"datePublished": "2026-10-07T08:48:56.246Z",
"dateReserved": "2026-06-28T15:00:00.720Z",
"dateUpdated": "2026-10-07T11:31:00.298Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-64393 (GCVE-0-2025-64393)
Vulnerability from cvelistv5 – Published: 2026-10-07 08:48 – Updated: 2026-10-08 03:55
VLAI
EPSS
VEX
Summary
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 00:00 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/KB4934 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup and Replication |
Affected:
12 , < 12.3.2.4934
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-64393",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T03:55:22.681Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup and Replication",
"vendor": "Veeam",
"versions": [
{
"lessThan": "12.3.2.4934",
"status": "affected",
"version": "12",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Nhien Pham (@nhienit) of Galaxy One"
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability in Veeam Backup \u0026 Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T08:48:49.509Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/KB4934"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2025-64393",
"datePublished": "2026-10-07T08:48:49.509Z",
"dateReserved": "2025-10-31T15:00:01.447Z",
"dateUpdated": "2026-10-08T03:55:22.681Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64632 (GCVE-0-2026-64632)
Vulnerability from cvelistv5 – Published: 2026-08-26 21:21 – Updated: 2026-08-27 15:04
VLAI
EPSS
VEX
Summary
A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 13:00 UTC
CWE
- CWE-522 - Insufficiently Protected Credentials
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4892 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-64632",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T13:00:23.798585Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T15:04:10.844Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ONE",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "13.0.2",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522 Insufficiently Protected Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T21:21:41.412Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4892"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-64632",
"datePublished": "2026-08-26T21:21:41.412Z",
"dateReserved": "2026-07-20T15:00:00.696Z",
"dateUpdated": "2026-08-27T15:04:10.844Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58070 (GCVE-0-2026-58070)
Vulnerability from cvelistv5 – Published: 2026-08-26 21:21 – Updated: 2026-08-27 15:04
VLAI
EPSS
VEX
Summary
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 12:59 UTC
CWE
- CWE-532 - Insertion of Sensitive Information into Log File
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4902 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Backup and Replication |
Affected:
0 , < 13.0.3
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58070",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T12:59:58.326509Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T15:04:11.211Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Backup and Replication",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.0.3",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "CWE-532 Insertion of Sensitive Information into Log File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T21:21:41.107Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4902"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-58070",
"datePublished": "2026-08-26T21:21:41.107Z",
"dateReserved": "2026-06-28T15:00:00.720Z",
"dateUpdated": "2026-08-27T15:04:11.211Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65641 (GCVE-0-2026-65641)
Vulnerability from cvelistv5 – Published: 2026-08-26 21:21 – Updated: 2026-08-27 15:04
VLAI
EPSS
VEX
Summary
A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 13:01 UTC
CWE
- CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4905 |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65641",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T13:01:28.078735Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T15:04:11.392Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "One",
"vendor": "Veeam",
"versions": [
{
"lessThan": "13.1",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "13.0.2",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:L",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T21:21:40.955Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4905"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-65641",
"datePublished": "2026-08-26T21:21:40.955Z",
"dateReserved": "2026-07-22T15:00:06.103Z",
"dateUpdated": "2026-08-27T15:04:11.392Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58072 (GCVE-0-2026-58072)
Vulnerability from cvelistv5 – Published: 2026-08-04 15:56 – Updated: 2026-08-05 03:57
VLAI
EPSS
VEX
Summary
A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-04 00:00 UTC
CWE
- CWE-22 - Path Traversal
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4893 |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Veeam | Service Provider Console |
Affected:
0 , < 9.3
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58072",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-04T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T03:57:05.326Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Service Provider Console",
"vendor": "Veeam",
"versions": [
{
"lessThan": "9.3",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:56:03.652Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4893"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-58072",
"datePublished": "2026-08-04T15:56:03.652Z",
"dateReserved": "2026-06-28T15:00:00.720Z",
"dateUpdated": "2026-08-05T03:57:05.326Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58074 (GCVE-0-2026-58074)
Vulnerability from cvelistv5 – Published: 2026-08-04 15:56 – Updated: 2026-08-05 03:57
VLAI
EPSS
VEX
Summary
A vulnerability allowing a high-privileged user to execute arbitrary code on the server.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-04 00:00 UTC
CWE
- CWE-94 - Code Injection
Assigner
hackerone
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.veeam.com/kb4892 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58074",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-04T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T03:57:06.591Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ONE",
"vendor": "Veeam",
"versions": [
{
"lessThanOrEqual": "13.0.2",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability allowing a high-privileged user to execute arbitrary code on the server."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94 Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:56:03.593Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://www.veeam.com/kb4892"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-58074",
"datePublished": "2026-08-04T15:56:03.593Z",
"dateReserved": "2026-06-28T15:00:00.720Z",
"dateUpdated": "2026-08-05T03:57:06.591Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}