VEEAM

Products

Exploited and recent CVEs

• CVE-2024-40711 Critical 9.8 Exploited A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). 90.4%
• CVE-2026-107238 High 8.7 A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collect 0.4%
• CVE-2026-107239 High 8.8 A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Col 0.6%
• CVE-2023-22793 Critical 9.3 A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System 0.5%
• CVE-2025-64394 Medium 4.3 A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation o 0.1%
• CVE-2026-108141 Medium 5.9 A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the b 0.4%
• CVE-2026-106078 Medium 6.9 A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup fo 0.3%
• CVE-2026-107671 High 8.5 A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification. 0.3%
• CVE-2026-108142 Critical 9.1 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. 0.4%
• CVE-2026-106077 High 8.3 A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges. 0.2%
• CVE-2026-106076 Critical 9.0 A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and 0.4%
• CVE-2026-108140 Medium 5.9 A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the b 0.4%
• CVE-2026-105477 High 7.3 A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected. 0.1%
• CVE-2025-64391 Medium 4.1 This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it. 0.1%
• CVE-2025-64392 Medium 4.8 This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link. 0.3%
• CVE-2026-93026 Medium 6.1 This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials. 0.3%
• CVE-2026-58068 Medium 6.8 This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system. 0.1%
• CVE-2026-58069 High 8.3 This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. 0.4%
• CVE-2025-64393 Critical 9.4 This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. 5.2%
• CVE-2026-64632 High 8.5 A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account. 0.4%
• CVE-2026-58070 Medium 6.8 A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials. 0.1%
• CVE-2026-65641 Critical 9.3 A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. 0.5%
• CVE-2026-58072 Critical 9.0 A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution. 0.5%
• CVE-2026-58074 High 8.6 A vulnerability allowing a high-privileged user to execute arbitrary code on the server. 0.5%
• CVE-2026-64630 Medium 5.3 A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. 0.4%
• CVE-2026-58073 Critical 9.5 A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials. 0.3%
• CVE-2026-64631 High 8.6 A vulnerability allowing a low-privileged user to inject SQL and extract database contents. 0.4%
• CVE-2026-58075 High 8.7 A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally. 0.4%
• CVE-2026-64633 Critical 10.0 A vulnerability allowing remote unauthenticated code execution on the agent host. 0.6%
• CVE-2026-64634 High 8.4 A vulnerability allowing local privilege escalation to the Reporter service context. 0.2%