CVE-2026-28384

An improper sanitization of the compressionalgorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints. This issue affected LXD from 4.12 through 6.6 and was fixed in the sn...

PT-2026-24958

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.12 through 6.6 Description An improper sanitization of the compression algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API cal...

Veeam Backup And Recovery 安全漏洞

Veeam Backup and Recovery is a data backup, recovery, and replication software developed by the American company Veeam. Veeam Backup and Recovery has a security vulnerability that stems from allowing local privilege escalation on Windows-based servers...

Veeam Backup And Replication 安全漏洞

Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. Veeam Backup and Replication has a security vulnerability that stems from allowing authenticated domain users to execute remote code execution...

PT-2026-24952

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication affected versions not specified Description The software contains a flaw that allows an authenticated domain user to perform remote code execution RCE on the Backup Server. This could lead to compromise of backup...

Veeam Backup And Replication 安全漏洞

Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. Veeam Backup and Replication has a security vulnerability that stems from allowing low-privilege users to extract stored SSH credentials...

PT-2026-24955

Name of the Vulnerable Software and Affected Versions Veeam Backup and Replication affected versions not specified Description The software contains a flaw that allows a user with domain access to execute code remotely on the Backup Server. The issue enables remote code execution RCE...

Veeam Backup And Replication 安全漏洞

Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. There is a security vulnerability in Veeam Backup and Replication, which stems from allowing backup administrators to execute remote code as the postgres user...

Veeam Backup And Recovery 安全漏洞

Veeam Backup and Recovery is a data backup, recovery, and replication software developed by the American company Veeam. Veeam Backup and Replication has a security vulnerability that stems from allowing authenticated domain users to execute remote code on the backup server...

PT-2026-24957

CVE: CVE-2026-21671 PT-Identifier: PT-2026-24957 Vendor: Veeam Product: Software Appliance CVSS: 9.1 Credits: n/a Description: A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup...

PT-2026-24953

CVE: CVE-2026-21667 PT-Identifier: PT-2026-24953 Vendor: Veeam Product: Backup and Replication CVSS: 10.0 Credits: n/a Description: A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server. References: • https://t.co/jp2KMmocwj •...

CVE-2026-21708: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-28384: Improper Neutralization of Special Elements used in an OS Command

An improper sanitization of the compressionalgorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints. This issue affected LXD from 4.12 through 6.6 and was fixed in the sn...

CVE-2026-21669: Improper Control of Generation of Code

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21666: Improper Access Control

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21672: Insertion of Sensitive Information into Externally-Accessible File or Directory

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers...

Veeam Backup And Replication 安全漏洞

Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. Veeam Backup and Replication has a security vulnerability that allows authenticated domain users to bypass restrictions and manipulate any file within the backup repository...

Veeam Backup And Replication 安全漏洞

Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. Veeam Backup and Replication has a security vulnerability that stems from allowing authenticated domain users to execute remote code execution...

CVE-2026-21671: Improper Control of Generation of Code

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup & Replication...

Veeam Backup And Recovery 安全漏洞

Veeam Backup and Recovery is a data backup, recovery, and replication software developed by the American company Veeam. Veeam Backup and Recovery has a security vulnerability that stems from allowing authenticated users with the role of backup administrators to execute remote code execution in...