Veeam vulnerabilities
107 CVEs and advisories name Veeam as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-107238A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running…
- CVE-2026-107239A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers…
- CVE-2023-22793A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization…
- CVE-2025-64394A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam…
- CVE-2026-108141A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to…
- CVE-2026-106078A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive…
- CVE-2026-107671A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally…
- CVE-2026-108142A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
- CVE-2026-106077A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server…
- CVE-2026-106076A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam…
- CVE-2026-108140A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to…
- CVE-2026-105477A vulnerability in Veeam Agent for Linux allows for local privilege escalation.
- CVE-2025-64391This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locati
- CVE-2025-64392This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a craft
- CVE-2026-93026This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus upd
- CVE-2026-58068This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system.
- CVE-2026-58069This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provide
- CVE-2025-64393This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
- CVE-2026-64632A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.
- CVE-2026-58070A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to
- CVE-2026-65641A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.
- CVE-2026-58072A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execu
- CVE-2026-58074A vulnerability allowing a high-privileged user to execute arbitrary code on the server.
- CVE-2026-64630A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.
- CVE-2026-58073A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's
- CVE-2026-64631A vulnerability allowing a low-privileged user to inject SQL and extract database contents.
- CVE-2026-58075A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privil
- CVE-2026-64633A vulnerability allowing remote unauthenticated code execution on the agent host.
- CVE-2026-64634A vulnerability allowing local privilege escalation to the Reporter service context.
- CVE-2026-58071A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administ