veeam Vulnerability Advisory Catalog

Total 71 security vulnerabilities recorded for veeam software and firmware.

← Back to All Vendors
CVE-2026-21708 CRITICAL
Component: veeam_backup_\&_replication

A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user....

📅 2026-03-12
CVSS 9.9 Dossier →
CVE-2026-21671 CRITICAL
Component: veeam_backup_\&_replication

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) dep...

📅 2026-03-12
CVSS 9.1 Dossier →
Component: veeam_backup_\&_replication

A vulnerability allowing a low-privileged user to extract saved SSH credentials....

📅 2026-03-12
CVSS 7.7 Dossier →
CVE-2026-21669 CRITICAL
Component: veeam_backup_\&_replication

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server....

📅 2026-03-12
CVSS 9.9 Dossier →
Component: veeam_backup_\&_replication

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository....

📅 2026-03-12
CVSS 8.8 Dossier →
CVE-2026-21667 CRITICAL
Component: veeam_backup_\&_replication

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server....

📅 2026-03-12
CVSS 9.9 Dossier →
CVE-2026-21666 CRITICAL
Component: veeam_backup_\&_replication

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server....

📅 2026-03-12
CVSS 9.9 Dossier →
CVE-2025-59470 CRITICAL
Component: veeam_backup_\&_replication

This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order param...

📅 2026-01-08
CVSS 9.0 Dossier →
CVE-2025-59469 CRITICAL
Component: veeam_backup_\&_replication

This vulnerability allows a Backup or Tape Operator to write files as root....

📅 2026-01-08
CVSS 9.0 Dossier →
CVE-2025-59468 CRITICAL
Component: veeam_backup_\&_replication

This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password paramete...

📅 2026-01-08
CVSS 9.0 Dossier →
Component: veeam_backup_\&_replication

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file....

📅 2026-01-08
CVSS 7.8 Dossier →
Component: veeam_backup_\&_replication

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user....

📅 2025-10-31
CVSS 8.8 Dossier →
CVE-2025-48983 CRITICAL
Component: veeam_backup_\&_replication

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by...

📅 2025-10-31
CVSS 9.9 Dossier →
Component: veeam_agent_for_windows

This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into restoring a ma...

📅 2025-10-31
CVSS 7.8 Dossier →
Component: veeam_backup_\&_replication

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code....

📅 2025-06-19
CVSS 7.2 Dossier →
Component: veeam_backup_\&_replication

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user...

📅 2025-06-19
CVSS 8.8 Dossier →
Component: veeam_backup_\&_replication

A vulnerability allowing remote code execution (RCE) for domain users....

📅 2025-03-20
CVSS 8.8 Dossier →
Component: backup

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized ...

📅 2025-01-14
CVSS 7.2 Dossier →
Component: veeam_agent_for_windows

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these d...

📅 2024-12-04
CVSS 7.0 Dossier →
Component: veeam_service_provider_console

A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the netwo...

📅 2024-12-04
CVSS 6.5 Dossier →
Component: veeam_backup_\&_replication

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credential...

📅 2024-12-04
CVSS 4.3 Dossier →
Component: veeam_backup_\&_replication

A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of meth...

📅 2024-12-04
CVSS 6.5 Dossier →
Component: veeam_backup_\&_replication

A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates critical con...

📅 2024-12-04
CVSS 8.8 Dossier →
Component: veeam_backup_\&_replication

A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sen...

📅 2024-12-04
CVSS 8.1 Dossier →
Page 1 of 3 (71 Total Records)