BF
Product
Backup for Microsoft 365
4
CVEs
0
On KEV
9.0
Max CVSS
4
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Backup for Microsoft 365 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106076 New | 9.0 | Oct 27 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to… Affected: 8.0 through 8.5.0.1014 |
| CVE-2026-106077 New | 8.3 | Oct 27 | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges Affected: 8.0 through 8.5.0.1014 |
| CVE-2026-106078 New | 6.9 | Oct 27 | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not… Affected: 8.0 through 8.6.0.1102 |
| CVE-2025-64394 New | 4.3 | Oct 27 | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to… Affected: 8.0 through 8.6.0.1102 |
Showing 4