Approved changes feed: RSS · Atom

cpe:2.3:a:veeam:backup_and_recovery:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVeeam (203dc226-d9ed-503f-8231-d4e4e702036f)
ProductBackup And Recovery (4fc53fb6-fd3a-57f2-a3e5-a90e4fa11761)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59470 vulnerable 2026-06-08 07:35:21.970219 Details available
CRITICAL (9)
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
Published: 2026-01-08T16:18:20.275Z
Updated: 2026-02-26T15:04:54.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59469 vulnerable 2026-06-08 07:35:21.969777 Details available
CRITICAL (9)
This vulnerability allows a Backup or Tape Operator to write files as root.
Published: 2026-01-08T16:18:20.314Z
Updated: 2026-02-26T15:04:54.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59468 vulnerable 2026-06-08 07:35:21.968479 Details available
CRITICAL (9)
This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.
Published: 2026-01-08T16:18:20.416Z
Updated: 2026-02-26T15:04:54.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55125 vulnerable 2026-06-08 07:33:14.091047 Details available
HIGH (7.8)
This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.
Published: 2026-01-08T16:18:20.398Z
Updated: 2026-01-08T17:33:26.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24286 vulnerable 2026-06-08 07:12:48.413293 Details available
HIGH (7.2)
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.
Published: 2025-06-18T23:30:51.882Z
Updated: 2025-06-23T16:05:15.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23121 vulnerable 2026-06-08 07:10:55.224009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23120 vulnerable 2026-06-08 07:10:55.222802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40714 vulnerable 2026-06-08 06:43:53.067915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40713 vulnerable 2026-06-08 06:43:53.067362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40712 vulnerable 2026-06-08 06:43:53.066866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40710 vulnerable 2026-06-08 06:43:53.063865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40709 vulnerable 2026-06-08 06:43:53.058305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39718 vulnerable 2026-06-08 06:41:51.450190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.