# cve.now: Veeam

The newest entries naming Veeam as an affected vendor (up to 200), of 107 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-107238](https://cve.now/CVE-2026-107238.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running… (CVSS 8.7)
- [CVE-2026-107239](https://cve.now/CVE-2026-107239.md): A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers… (CVSS 8.8)
- [CVE-2023-22793](https://cve.now/CVE-2023-22793.md): A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization… (CVSS 9.3)
- [CVE-2025-64394](https://cve.now/CVE-2025-64394.md): A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam… (CVSS 4.3)
- [CVE-2026-108141](https://cve.now/CVE-2026-108141.md): A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to… (CVSS 5.9)
- [CVE-2026-106078](https://cve.now/CVE-2026-106078.md): A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive… (CVSS 6.9)
- [CVE-2026-107671](https://cve.now/CVE-2026-107671.md): A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally… (CVSS 8.5)
- [CVE-2026-108142](https://cve.now/CVE-2026-108142.md): A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. (CVSS 9.1)
- [CVE-2026-106077](https://cve.now/CVE-2026-106077.md): A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server… (CVSS 8.3)
- [CVE-2026-106076](https://cve.now/CVE-2026-106076.md): A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam… (CVSS 9.0)
- [CVE-2026-108140](https://cve.now/CVE-2026-108140.md): A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to… (CVSS 5.9)
- [CVE-2026-105477](https://cve.now/CVE-2026-105477.md): A vulnerability in Veeam Agent for Linux allows for local privilege escalation. (CVSS 7.3)
- [CVE-2025-64391](https://cve.now/CVE-2025-64391.md): This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locati (CVSS 4.1)
- [CVE-2025-64392](https://cve.now/CVE-2025-64392.md): This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a craft (CVSS 4.8)
- [CVE-2026-93026](https://cve.now/CVE-2026-93026.md): This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus upd (CVSS 6.1)
- [CVE-2026-58068](https://cve.now/CVE-2026-58068.md): This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system. (CVSS 6.8)
- [CVE-2026-58069](https://cve.now/CVE-2026-58069.md): This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provide (CVSS 8.3)
- [CVE-2025-64393](https://cve.now/CVE-2025-64393.md): This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. (CVSS 9.4)
- [CVE-2026-64632](https://cve.now/CVE-2026-64632.md): A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account. (CVSS 8.5)
- [CVE-2026-58070](https://cve.now/CVE-2026-58070.md): A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to (CVSS 6.8)
- [CVE-2026-65641](https://cve.now/CVE-2026-65641.md): A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. (CVSS 9.3)
- [CVE-2026-58072](https://cve.now/CVE-2026-58072.md): A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execu (CVSS 9.0)
- [CVE-2026-58074](https://cve.now/CVE-2026-58074.md): A vulnerability allowing a high-privileged user to execute arbitrary code on the server. (CVSS 8.6)
- [CVE-2026-64630](https://cve.now/CVE-2026-64630.md): A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. (CVSS 5.3)
- [CVE-2026-58073](https://cve.now/CVE-2026-58073.md): A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's (CVSS 9.5)
- [CVE-2026-64631](https://cve.now/CVE-2026-64631.md): A vulnerability allowing a low-privileged user to inject SQL and extract database contents. (CVSS 8.6)
- [CVE-2026-58075](https://cve.now/CVE-2026-58075.md): A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privil (CVSS 8.7)
- [CVE-2026-64633](https://cve.now/CVE-2026-64633.md): A vulnerability allowing remote unauthenticated code execution on the agent host. (CVSS 10.0)
- [CVE-2026-64634](https://cve.now/CVE-2026-64634.md): A vulnerability allowing local privilege escalation to the Reporter service context. (CVSS 8.4)
- [CVE-2026-58071](https://cve.now/CVE-2026-58071.md): A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administ (CVSS 8.2)
- [CVE-2026-58067](https://cve.now/CVE-2026-58067.md): A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service. (CVSS 8.7)
- [CVE-2026-64635](https://cve.now/CVE-2026-64635.md): Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated att (CVSS 5.3)
- [CVE-2026-56844](https://cve.now/CVE-2026-56844.md): A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and (CVSS 8.4)
- [CVE-2026-44963](https://cve.now/CVE-2026-44963.md): A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. (CVSS 9.4)
- [CVE-2026-32998](https://cve.now/CVE-2026-32998.md): This vulnerability in Veeam Service Provider Console allows for remote code execution. (CVSS 9.4)
- [CVE-2026-32997](https://cve.now/CVE-2026-32997.md): A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Rep (CVSS 8.6)
- [CVE-2026-32996](https://cve.now/CVE-2026-32996.md): This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. (CVSS 7.3)
- [CVE-2026-21709](https://cve.now/CVE-2026-21709.md): A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement. (CVSS 6.7)
- [CVE-2026-21708](https://cve.now/CVE-2026-21708.md): A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. (CVSS 9.9)
- [CVE-2026-21672](https://cve.now/CVE-2026-21672.md): A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers. (CVSS 8.8)
- [CVE-2026-21668](https://cve.now/CVE-2026-21668.md): A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. (CVSS 8.8)
- [CVE-2026-21669](https://cve.now/CVE-2026-21669.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. (CVSS 10.0)
- [CVE-2026-21671](https://cve.now/CVE-2026-21671.md): A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabilit (CVSS 9.1)
- [CVE-2026-21670](https://cve.now/CVE-2026-21670.md): A vulnerability allowing a low-privileged user to extract saved SSH credentials. (CVSS 7.7)
- [CVE-2026-21666](https://cve.now/CVE-2026-21666.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. (CVSS 10.0)
- [CVE-2026-21667](https://cve.now/CVE-2026-21667.md): A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. (CVSS 10.0)
- [CVE-2025-59468](https://cve.now/CVE-2025-59468.md): This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious passwor (CVSS 9.0)
- [CVE-2025-55125](https://cve.now/CVE-2025-55125.md): This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configura (CVSS 7.8)
- [CVE-2025-59469](https://cve.now/CVE-2025-59469.md): This vulnerability allows a Backup or Tape Operator to write files as root. (CVSS 9.0)
- [CVE-2025-59470](https://cve.now/CVE-2025-59470.md): This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or o (CVSS 9.0)
- [CVE-2025-48983](https://cve.now/CVE-2025-48983.md): A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructur (CVSS 10.0)
- [CVE-2025-48982](https://cve.now/CVE-2025-48982.md): This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into rest (CVSS 7.3)
- [CVE-2025-48984](https://cve.now/CVE-2025-48984.md): A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. (CVSS 8.8)
- [CVE-2025-24286](https://cve.now/CVE-2025-24286.md): A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. (CVSS 7.2)
- [CVE-2025-23121](https://cve.now/CVE-2025-23121.md): A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user (CVSS 9.9)
- [CVE-2025-24287](https://cve.now/CVE-2025-24287.md): A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with ele (CVSS 6.1)
- [CVE-2025-23120](https://cve.now/CVE-2025-23120.md): A vulnerability allowing remote code execution (RCE) for domain users. (CVSS 9.9)
- [CVE-2025-23114](https://cve.now/CVE-2025-23114.md): A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. (CVSS 9.0)
- [CVE-2025-23082](https://cve.now/CVE-2025-23082.md): Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). (CVSS 7.2)
- [CVE-2024-42448](https://cve.now/CVE-2024-42448.md): From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Rem (CVSS 9.9)
- [CVE-2024-45204](https://cve.now/CVE-2024-45204.md): A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved (CVSS 7.7)
- [CVE-2024-42451](https://cve.now/CVE-2024-42451.md): A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. (CVSS 7.7)
- [CVE-2024-42453](https://cve.now/CVE-2024-42453.md): A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastruct (CVSS 7.4)
- [CVE-2024-45207](https://cve.now/CVE-2024-45207.md): DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. (CVSS 7.0)
- [CVE-2024-42457](https://cve.now/CVE-2024-42457.md): A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combinati (CVSS 7.7)
- [CVE-2024-42452](https://cve.now/CVE-2024-42452.md): A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, (CVSS 8.8)
- [CVE-2024-45206](https://cve.now/CVE-2024-45206.md): A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of (CVSS 6.5)
- [CVE-2024-40717](https://cve.now/CVE-2024-40717.md): A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by upda (CVSS 8.8)
- [CVE-2024-42456](https://cve.now/CVE-2024-42456.md): A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates cr (CVSS 8.8)
- [CVE-2024-42455](https://cve.now/CVE-2024-42455.md): A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserializat (CVSS 7.1)
- [CVE-2024-42449](https://cve.now/CVE-2024-42449.md): From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbi (CVSS 7.1)
- [CVE-2024-40715](https://cve.now/CVE-2024-40715.md): A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypas (CVSS 7.7)
- [CVE-2024-38650](https://cve.now/CVE-2024-38650.md): An authentication bypass vulnerability can allow a low privileged attacker to access the NTLM hash of service account on the VSPC server. (CVSS 9.9)
- [CVE-2024-42021](https://cve.now/CVE-2024-42021.md): An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials. (CVSS 7.5)
- [CVE-2024-42023](https://cve.now/CVE-2024-42023.md): An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely. (CVSS 7.8)
- [CVE-2024-40718](https://cve.now/CVE-2024-40718.md): A server side request forgery vulnerability allows a low-privileged user to perform local privilege escalation through exploiting an SSRF vu (CVSS 8.8)
- [CVE-2024-40714](https://cve.now/CVE-2024-40714.md): An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive (CVSS 8.3)
- [CVE-2024-42024](https://cve.now/CVE-2024-42024.md): A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on (CVSS 9.1)
- [CVE-2024-42022](https://cve.now/CVE-2024-42022.md): An incorrect permission assignment vulnerability allows an attacker to modify product configuration files. (CVSS 7.5)
- [CVE-2024-40713](https://cve.now/CVE-2024-40713.md): A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alter Multi-Factor Authe (CVSS 7.8)
- [CVE-2024-40709](https://cve.now/CVE-2024-40709.md): A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level. (CVSS 7.8)
- [CVE-2024-40711](https://cve.now/CVE-2024-40711.md): A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). (CVSS 9.8, KEV)
- [CVE-2024-39715](https://cve.now/CVE-2024-39715.md): A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC (CVSS 8.5)
- [CVE-2024-40712](https://cve.now/CVE-2024-40712.md): A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perform local privilege es (CVSS 7.8)
- [CVE-2024-38651](https://cve.now/CVE-2024-38651.md): A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC server, which can lead to remote code executi (CVSS 8.5)
- [CVE-2024-42020](https://cve.now/CVE-2024-42020.md): A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection. (CVSS 7.3)
- [CVE-2024-39714](https://cve.now/CVE-2024-39714.md): A code injection vulnerability that permits a low-privileged user to upload arbitrary files to the server, leading to remote code execution (CVSS 9.9)
- [CVE-2024-40710](https://cve.now/CVE-2024-40710.md): A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extracti (CVSS 8.8)
- [CVE-2024-39718](https://cve.now/CVE-2024-39718.md): An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equival (CVSS 8.1)
- [CVE-2024-42019](https://cve.now/CVE-2024-42019.md): A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. (CVSS 9.0)
- [CVE-2024-29855](https://cve.now/CVE-2024-29855.md): Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator (CVSS 9.0)
- [CVE-2024-29853](https://cve.now/CVE-2024-29853.md): An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation. (CVSS 7.8)
- [CVE-2024-29851](https://cve.now/CVE-2024-29851.md): Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account. (CVSS 7.2)
- [CVE-2024-29852](https://cve.now/CVE-2024-29852.md): Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs. (CVSS 2.7)
- [CVE-2024-29850](https://cve.now/CVE-2024-29850.md): Veeam Backup Enterprise Manager allows account takeover via NTLM relay. (CVSS 8.8)
- [CVE-2024-29849](https://cve.now/CVE-2024-29849.md): Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface. (CVSS 9.8)
- [CVE-2024-29212](https://cve.now/CVE-2024-29212.md): Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management ag (CVSS 9.9)
- [CVE-2024-22022](https://cve.now/CVE-2024-22022.md): Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash (CVSS 8.8)
- [CVE-2024-22021](https://cve.now/CVE-2024-22021.md): Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Sco (CVSS 6.5)
- [CVE-2023-38548](https://cve.now/CVE-2023-38548.md): A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of (CVSS 9.8)
- [CVE-2023-38549](https://cve.now/CVE-2023-38549.md): A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of (CVSS 4.5)
- [CVE-2023-38547](https://cve.now/CVE-2023-38547.md): A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its (CVSS 9.9)
- [CVE-2023-41723](https://cve.now/CVE-2023-41723.md): A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. (CVSS 4.3)
- [CVE-2020-15419](https://cve.now/CVE-2020-15419.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750\_20200415. (CVSS 7.5)
- [CVE-2020-15418](https://cve.now/CVE-2020-15418.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750\_20200415. (CVSS 7.5)
- [CVE-2020-10915](https://cve.now/CVE-2020-10915.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. (CVSS 9.8)
- [CVE-2020-10914](https://cve.now/CVE-2020-10914.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/veeam
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.