BR
Backup
Backup & Replication
On CISA KEVExploited in the wildRansomware-linked
56
CVEs
4
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 15High 28Medium 11Low 1
Watch
Add Backup & Replication to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58070 | 6.8 | Aug 26 | A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account… Affected: before 13.0.3 |
| CVE-2026-21709 | 6.7 | Apr 17 | A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement Affected: 12 before 12.3.2 |
| CVE-2026-21668 | 6.5 | Mar 12 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository Affected: 12.3.2 before 12.3.2 |
| CVE-2026-21670 | 6.5 | Mar 12 | A vulnerability allowing a low-privileged user to extract saved SSH credentials Affected: 13.0.1 before 13.0.1 |
| CVE-2024-42457 | 6.5 | Dec 4 | A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management… Affected: 12.0.0.1402 before 12.3.0.310 |
| CVE-2024-42451 | 6.5 | Dec 4 | A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext Affected: 12.0.0.1402 before 12.3.0.310 |
| CVE-2026-93026 | 6.1 | Oct 7 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials Affected: 12 before 12.3.2.4934 |
| CVE-2026-108141 New | 5.9 | Oct 27 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an… Affected: 13.0 before 13.0.3; 13.1 before 13.1.2 |
| CVE-2026-108140 New | 5.9 | Oct 27 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an… Affected: 13.0 before 13.0.3; 13.1 before 13.1.2 |
| CVE-2025-24286 | 4.9 | Jun 19 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code Affected: before 12.3.2.3617 |
| CVE-2024-45204 | 4.3 | Dec 4 | A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials Affected: 12.0.0.1402 before 12.3.0.310 |
Showing 11
