Advisories · Technology

Veeam Backup and Replication.

Every CVE that names Veeam Backup and Replication among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108141 CVE record

CVSS 5.9 Medium

Path traversal in Veeam Backup and Replication
- Veeam Backup and Replication
- Path traversal
Not analysed yet 27 Oct 2026
CVE-2026-108142 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
- Veeam Backup and Replication
- CWE-636
Not analysed yet 27 Oct 2026
CVE-2026-108140 CVE record

CVSS 5.9 Medium

Path traversal in Veeam Backup and Replication
- Veeam Backup and Replication
- Path traversal
Not analysed yet 27 Oct 2026
CVE-2026-93026 CVE record

CVSS 6.1 Medium

Missing authorization in Veeam Backup and Replication
- Veeam Backup and Replication
- Broken access control
Not analysed yet 7 Oct 2026
CVE-2026-58069 CVE record

CVSS 8.3 High

Path traversal in Veeam Backup and Replication
- Veeam Backup and Replication
- Path traversal
Not analysed yet 7 Oct 2026
CVE-2025-64393 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Veeam Backup and Replication
- Veeam Backup and Replication
- Insecure deserialization
Not analysed yet 7 Oct 2026
CVE-2026-58070 CVE record

CVSS 6.8 Medium

Sensitive information in log files in Veeam Backup and Replication
- Veeam Backup and Replication
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-56844 CVE record

CVSS 8.4 High

Path traversal in Veeam Backup and Replication
- Veeam Backup and Replication
- Path traversal
Not analysed yet 22 Jul 2026
CVE-2026-44963 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Veeam Backup and Replication
- Veeam Backup and Replication
- Insecure deserialization
Not analysed yet 9 Jun 2026
CVE-2026-32997 CVE record

CVSS 8.6 High

Path traversal in Veeam Backup and Replication
- Veeam Backup and Replication
- Path traversal
Not analysed yet 28 May 2026
CVE-2026-32996 CVE record

CVSS 7.3 High

Sensitive information in log files in Veeam Backup and Replication
- Veeam Backup and Replication
- Information disclosure
Not analysed yet 28 May 2026
CVE-2026-21709 CVE record

CVSS 6.7 Medium

Command injection in Veeam Backup and Replication and others
- Veeam Backup and Replication
- Veeam Software Appliance
- Command injection
Not analysed yet 17 Apr 2026
CVE-2026-21708 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

SQL injection in Veeam Backup and Replication
- Veeam Backup and Replication
- SQL injection
Not analysed yet 12 Mar 2026
CVE-2026-21672 CVE record

CVSS 8.8 High

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
- Veeam Backup and Replication
- Information disclosure
Not analysed yet 12 Mar 2026
CVE-2026-21668 CVE record

CVSS 8.8 High

Protection mechanism failure in Veeam Backup and Replication
- Veeam Backup and Replication
- CWE-693
Not analysed yet 12 Mar 2026
CVE-2026-21669 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Protection mechanism failure in Veeam Backup and Replication
- Veeam Backup and Replication
- CWE-693
Not analysed yet 12 Mar 2026
CVE-2026-21670 CVE record

CVSS 7.7 High

Insufficiently protected credentials in Veeam Backup and Replication
- Veeam Backup and Replication
- Hard-coded credentials
Not analysed yet 12 Mar 2026
CVE-2026-21666 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Veeam Backup and Replication
- Veeam Backup and Replication
- Broken access control
Not analysed yet 12 Mar 2026
CVE-2026-21667 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Veeam Backup and Replication
- Veeam Backup and Replication
- Broken access control
Not analysed yet 12 Mar 2026
CVE-2025-48983 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Veeam Backup and Replication
- Veeam Backup and Replication
- Broken access control
Not analysed yet 30 Oct 2025
CVE-2025-48984 CVE record

CVSS 8.8 High

Code injection in Veeam Backup and Replication
- Veeam Backup and Replication
- Code injection
Not analysed yet 30 Oct 2025