BR
Backup
Backup & Replication
On CISA KEVExploited in the wildRansomware-linked
56
CVEs
4
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 15High 28Medium 11Low 1
Watch
Add Backup & Replication to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108141 New | 5.9 | Oct 27 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an… Affected: 13.0 before 13.0.3; 13.1 before 13.1.2 |
| CVE-2026-108140 New | 5.9 | Oct 27 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an… Affected: 13.0 before 13.0.3; 13.1 before 13.1.2 |
| CVE-2025-24286 | 4.9 | Jun 19 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code Affected: before 12.3.2.3617 |
| CVE-2024-45204 | 4.3 | Dec 4 | A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials Affected: 12.0.0.1402 before 12.3.0.310 |
| CVE-2024-29852 | 2.7 | May 22 | Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs Affected: before 12.1.2.172 |
| CVE-2015-5742 | – | Oct 16 | VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator credentials in log files with world-readable permissions, which allows local users… Affected: through 8.0.0.2030 |