Backup For Microsoft 365
Approved changes feed: RSS · Atom
cpe:2.3:a:veeam:backup_for_microsoft_365:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Veeam (203dc226-d9ed-503f-8231-d4e4e702036f) |
|---|---|
| Product | Backup For Microsoft 365 (78397be1-ec93-5bc8-b4e3-3fec26d67047) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-106078 |
vulnerable | 2026-11-03 10:16:14.128486 |
Details available
A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.
Published: 2026-10-27T16:16:58.925Z
Updated: 2026-11-04T17:57:09.773Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-106077 |
vulnerable | 2026-11-03 10:16:13.711833 |
Details available
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.
Published: 2026-10-27T16:16:58.905Z
Updated: 2026-11-04T20:24:34.752Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-106076 |
vulnerable | 2026-11-03 10:16:13.636898 |
Details available
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account.
Published: 2026-10-27T16:16:58.882Z
Updated: 2026-11-04T20:24:41.531Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64394 |
vulnerable | 2026-11-03 10:06:39.703774 |
Details available
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
Published: 2026-10-27T16:16:58.979Z
Updated: 2026-11-04T17:46:50.609Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.