Backup And Replication
Approved changes feed: RSS · Atom
cpe:2.3:a:veeam:backup_and_replication:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Veeam (203dc226-d9ed-503f-8231-d4e4e702036f) |
|---|---|
| Product | Backup And Replication (7eefd5ca-392d-5aa6-a69f-8cbbb8ef7be6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32997 |
vulnerable | 2026-06-03 15:20:44.075146 |
Details available
A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.
Published: 2026-05-28T04:01:37.753Z
Updated: 2026-05-29T03:55:46.602Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32996 |
vulnerable | 2026-06-03 15:20:44.074778 |
Details available
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
Published: 2026-05-28T04:01:37.686Z
Updated: 2026-05-29T03:55:48.045Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21709 |
vulnerable | 2026-06-03 15:15:51.493115 |
Details available
A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.
Published: 2026-04-17T15:32:10.755Z
Updated: 2026-04-20T14:06:52.636Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21708 |
vulnerable | 2026-06-03 15:15:51.492784 |
Details available
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
Published: 2026-03-12T16:26:52.931Z
Updated: 2026-05-10T12:51:15.514Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21672 |
vulnerable | 2026-06-03 15:15:51.468949 |
Details available
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
Published: 2026-03-12T16:26:52.213Z
Updated: 2026-05-10T13:00:07.736Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21670 |
vulnerable | 2026-06-03 15:15:51.463409 |
Details available
HIGH (7.7)
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
Published: 2026-03-12T15:09:39.200Z
Updated: 2026-05-10T12:53:07.750Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21669 |
vulnerable | 2026-06-03 15:15:51.462942 |
Details available
CRITICAL (10)
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
Published: 2026-03-12T15:09:39.284Z
Updated: 2026-05-10T13:34:10.673Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21668 |
vulnerable | 2026-06-03 15:15:51.462583 |
Details available
HIGH (8.8)
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.
Published: 2026-03-12T15:09:39.335Z
Updated: 2026-05-10T13:33:44.706Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21667 |
not_vulnerable | 2026-06-03 15:15:51.462305 |
Details available
CRITICAL (10)
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
Published: 2026-03-12T15:09:39.148Z
Updated: 2026-03-13T03:55:44.508Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21666 |
vulnerable | 2026-06-03 15:15:51.460866 |
Details available
CRITICAL (10)
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
Published: 2026-03-12T15:09:39.180Z
Updated: 2026-03-13T03:55:43.772Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48984 |
vulnerable | 2026-06-03 15:01:43.842345 |
Details available
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
Published: 2025-10-30T23:31:34.218Z
Updated: 2026-02-26T16:56:46.096Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48983 |
vulnerable | 2026-06-03 15:01:43.840862 |
Details available
CRITICAL (10)
A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.
Published: 2025-10-30T23:33:01.993Z
Updated: 2026-02-26T16:56:45.241Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42456 |
vulnerable | 2026-06-03 14:56:36.876709 |
Details available
HIGH (8.8)
A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates critical configuration settings, such as modifying the trusted client certificate used for authentication on a specific port. This can result in unauthorized access, enabling the user to call privileged methods and initiate critical services. The issue arises due to insufficient permission requirements on the method, allowing users with low privileges to perform actions that should require higher-level permissions.
Published: 2024-12-04T01:06:04.627Z
Updated: 2024-12-04T16:48:57.686Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42455 |
vulnerable | 2026-06-03 14:56:36.876276 |
Details available
HIGH (7.1)
A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The vulnerability is caused by an insufficient blacklist during the deserialization process.
Published: 2024-12-04T01:06:04.626Z
Updated: 2024-12-05T10:59:46.913Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40717 |
vulnerable | 2026-06-03 14:56:33.400224 |
Details available
HIGH (8.8)
A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by updating existing jobs. These jobs can be configured to run pre- and post-scripts, which can be located on a network share and are executed with elevated privileges by default. The user can update a job and schedule it to run almost immediately, allowing arbitrary code execution on the server.
Published: 2024-12-04T01:06:04.636Z
Updated: 2025-03-13T17:40:27.483Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.