VEEAM Backup and Replication

• CVE-2026-108141 Medium 5.9 A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the b 0.4%
• CVE-2026-108142 Critical 9.1 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. 0.4%
• CVE-2026-108140 Medium 5.9 A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the b 0.4%
• CVE-2026-93026 Medium 6.1 This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials. 0.3%
• CVE-2026-58069 High 8.3 This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. 0.4%
• CVE-2025-64393 Critical 9.4 This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. 5.2%
• CVE-2026-58070 Medium 6.8 A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials. 0.1%
• CVE-2026-56844 High 8.4 A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system. 0.2%
• CVE-2026-44963 Critical 9.4 A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. 2.4%
• CVE-2026-32997 High 8.6 A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server. 0.5%
• CVE-2026-32996 High 7.3 This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. 0.2%
• CVE-2026-21709 Medium 6.7 A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement. 0.2%
• CVE-2026-21708 Critical 9.9 A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. 1.3%
• CVE-2026-21672 High 8.8 A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers. 0.2%
• CVE-2026-21668 High 8.8 A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. 0.5%
• CVE-2026-21669 Critical 10.0 A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. 1.2%
• CVE-2026-21670 High 7.7 A vulnerability allowing a low-privileged user to extract saved SSH credentials. 0.5%
• CVE-2026-21666 Critical 10.0 A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. 1.2%
• CVE-2026-21667 Critical 10.0 A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. 1.2%
• CVE-2025-48983 Critical 10.0 A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user. 0.8%
• CVE-2025-48984 High 8.8 A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. 1.0%