BR
Backup
Backup & Replication
by Veeam · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
56
CVEs
4
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 15High 28Medium 11Low 1
Watch

Add Backup & Replication to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58070
6.8
0%
Aug 26
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account…
Affected: before 13.0.3
CVE-2026-21709
6.7
0%
Apr 17
A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement
Affected: 12 before 12.3.2
CVE-2026-21668
6.5
1%
Mar 12
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository
Affected: 12.3.2 before 12.3.2
CVE-2026-21670
6.5
0%
Mar 12
A vulnerability allowing a low-privileged user to extract saved SSH credentials
Affected: 13.0.1 before 13.0.1
CVE-2024-42457
6.5
0%
Dec 4
A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management…
Affected: 12.0.0.1402 before 12.3.0.310
CVE-2024-42451
6.5
0%
Dec 4
A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext
Affected: 12.0.0.1402 before 12.3.0.310
CVE-2026-93026
6.1
0%
Oct 7
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials
Affected: 12 before 12.3.2.4934
CVE-2026-108141
New
5.9–Oct 27
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an…
Affected: 13.0 before 13.0.3; 13.1 before 13.1.2
CVE-2026-108140
New
5.9–Oct 27
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an…
Affected: 13.0 before 13.0.3; 13.1 before 13.1.2
CVE-2025-24286
4.9
19%
Jun 19
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code
Affected: before 12.3.2.3617
CVE-2024-45204
4.3
0%
Dec 4
A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials
Affected: 12.0.0.1402 before 12.3.0.310
Showing 11