Veeam Backup and Replication 12.x < 12.3.2.4465 Multiple Vulnerabilities (KB4830)

The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.4465. It is, therefore, affected by multiple vulnerabilities, including: - A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21668

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

CVE-2026-21669

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21666

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21667

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution

Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that, if successfully exploited, could result in remote code execution. The vulnerabilities are as follows - CVE-2026-21666 CVSS score: 9.9 - A vulnerability that allows an...

EUVD-2026-11579

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

EUVD-2026-11577

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

EUVD-2026-11576

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

EUVD-2026-11574

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21669

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21666

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21668

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

CVE-2026-21667

Veeam Backup & Replication CVE-2026-21667 allows an authenticated domain user to perform remote code execution on the Backup Server. Affected product: Veeam Backup & Replication (versions prior to the patched builds). Reported CVSS data shows high to critical impact (C, I, A = HIGH; initial base ...

CVE-2026-21667

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21669

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21668

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

CVE-2026-21668

Technical details about CVE-2026-21668 are not provided in the supplied documents. Monitor for updates from Veeam (KB4830) and related advisories for affected products, impact, and remediation.

CVE-2026-21669

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21669

CVE-2026-21669: An authenticated domain user can perform remote code execution on the Backup Server. The entry provides a high-severity CVSSv3.1 base score (9.9, CRITICAL) with Network attack vector, Low complexity, Privileges Required: Low, No user interaction, and all impact metrics (Confidenti...