CVE-2025-64393: Deserialization of Untrusted Data

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

PT-2026-107434

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

Access Denied for ListBuckets/GetBuckets on S3-Compatible Repositories

Challenge When adding an S3-compatible object storage repository to Veeam Backup & Replication, or during regular use of an existing one, Access Denied events related to a ListBuckets/GetBuckets operation may appear in the object storage system's access logs. These issues occur even though the...

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4

Article Applicability All vulnerabilities listed in this article: Affect only Veeam Backup & Replication 12.3.2 P3 build 12.3.2.4854 and older builds. Are resolved in Veeam Backup & Replication 12.3.2 P4 build 12.3.2.4934. Do not affect any Veeam Backup & Replication version 13 builds. Customers...

How to Disable the Automatic Installation of Security Updates When Adding a Veeam Infrastructure Appliance to Veeam Backup & Replication

Purpose By default, when a new Veeam Infrastructure Appliance is added to the Veeam Backup & Replication infrastructure, all available security updates are installed on that appliance automatically by the Veeam Updater running on it. The installation of updates can take a significant amount of...

Proxmox VE Worker VM Deployment Fails When Default Local Storage Is Disabled

Challenge When attempting to deploy or test a worker VM, the operation fails with the following errors: Failed to deploy the worker VM: Cannot access a closed Stream. Worker test failed: Cannot access a closed Stream. This may also occur after an upgrade, when the existing worker VM is recreated...

PT-2026-82276

『A vulnerability that causes guest OS credentials used for Application Aware processing to be recorded in cleartext in logs on the guest machine.』 CVE-2026-58070 Severity: Medium KB4902: Vulnerability Resolved in Veeam Backup & Replication 13.1 https://t.co/FR1ctYoEZc...

Vulnerabilities Resolved in Veeam Backup & Replication 13.1

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Microsoft SQL Server Backup Policy Retention: Behavior and Recommendations

Challenge When a Microsoft SQL Server Backup Policy fails consistently for an extended period, restore points created by that policy may be removed if the Remove deleted items data after option is enabled in that policy. Cause This behavior occurs because the Remove deleted items data after optio...

Sign-In Error After Migrating Configuration From MFA-Enabled Server

Challenge After performing Configuration Restore using the Migration mode from a Configuration Backup created by a Veeam Backup & Replication server that had MFA enabled, login attempts using local accounts cause the Veeam Backup & Replication Console to display the error: Unable to sign in: user...

Release Information for Fsas ETERNUS EP300 Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing Fsas ETERNUS EP300 Plug-In v2.2.309, make sure that you are running Veeam Backup &...

Veeam Management Pack for Microsoft System Center / Veeam Backup & Replication 13 Compatibility

Article Applicability The patch on this article only enables monitoring of Windows-based Veeam Backup & Replication 13.x deployments. Veeam Management Pack for Microsoft System Center 9a does not support monitoring Veeam Software Appliance. Challenge After Veeam Backup & Replication is upgraded t...

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution. Tracked as CVE-2026-44963 , the vulnerability carries a CVSS score of 9.4 out of a maximum of 10.0. "A vulnerability allowing remote code execution RCE o...

Vulnerability Resolved in Veeam Backup & Replication 12.3.2.4854

All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 12.3.2.4854. This vulnerability does not affect any version 13.x build of Veeam Backup & Replication due to architectural changes starting in version 13. Veeam Software Security Commitment Veeam® is committ...

CVE-2026-32997: Absolute Path Traversal

A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server...

CVE-2026-21671

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup & Replication...

EUVD-2026-11595

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers...

CVE-2026-21672

A vulnerability in Veeam Backup & Replication on Windows-based servers allows for local privilege escalation . This flaw enables an attacker with local access to increase their privileges, potentially compromising the security context of backup and replication processes. The vulnerability affects...

CVE-2026-21671

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup & Replication...

CVE-2026-21671

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup & Replication...