BR
Backup
Backup & Replication
On CISA KEVExploited in the wildRansomware-linked
56
CVEs
4
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 15High 28Medium 11Low 1
Watch
Add Backup & Replication to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-40711 RansomwareIn wildKEV | 9.8 | Sep 7 | Veeam Backup and Replication Deserialization Vulnerability Affected: 12.0.0.1420 before 12.2.0.334 |
| CVE-2022-26501 RansomwareIn wildKEV | 9.8 | Mar 17 | Veeam Backup & Replication Remote Code Execution Vulnerability Affected: 10.0.0.4442 before 10.0.1.4854; 11.0.0.825 before 11.0.1.1261; 10.0.1.4854; 10.0.1.4854; 10.0.1.4854; 11.0.1.1261; +2 more |
| CVE-2026-21708 | 9.9 | Mar 12 | A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user Affected: 12 before 12.3.2; 13 before 13.0.1 |
| CVE-2026-21669 | 9.9 | Mar 12 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server Affected: 13.0.1 before 13.0.1 |
| CVE-2025-48983 | 9.9 | Oct 31 | A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user Affected: 12.0.0.1402 before 12.3.2.4165 |
| CVE-2025-55125 | 9.8 | Jan 8 | This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file Affected: 13.0.0.4967 before 13.0.1.1071 |
| CVE-2024-29849 | 9.8 | May 22 | Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface Affected: before 12.1.2.172 |
| CVE-2021-35971 | 9.8 | Jun 30 | Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting Affected: 10.0 before 10.0.1.4854; 11.0 before 11.0.0.837 |
| CVE-2025-64393 | 9.4 | Oct 7 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server Affected: 12 before 12.3.2.4934 |
| CVE-2026-44963 | 9.4 | Jun 9 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user Affected: before 12.3.2 |
| CVE-2026-108142 New | 9.1 | Oct 27 | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service Affected: 13.0 before 13.0.3; 13.1 before 13.1.2 |
| CVE-2026-21671 | 9.1 | Mar 12 | A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup &… Affected: 13.0.0.496 through 13.0.1.1071 |
| CVE-2025-59468 | 9.1 | Jan 8 | This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter Affected: 13.0.0.4967 before 13.0.1.1071 |
| CVE-2025-59469 | 9.0 | Jan 8 | This vulnerability allows a Backup or Tape Operator to write files as root Affected: 13.0.0.4967 before 13.0.1.1071 |
| CVE-2025-59470 | 9.0 | Jan 8 | This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter Affected: 13.0.0.4967 before 13.0.1.1071 |
Showing 15