CVE-2026-21668

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

CVE-2026-21666

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21669

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21666

CVE-2026-21666 is a vulnerability affecting Veeam Backup & Replication where an authenticated domain user can perform remote code execution on the Backup Server. Public data across multiple feeds confirms the issue stems from access-control weaknesses enabling code execution with high impact on b...

CVE-2026-21669

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21669

CVE-2026-21669: An authenticated domain user can perform remote code execution on the Backup Server. The entry provides a high-severity CVSSv3.1 base score (9.9, CRITICAL) with Network attack vector, Low complexity, Privileges Required: Low, No user interaction, and all impact metrics (Confidenti...

PT-2026-24953

CVE: CVE-2026-21667 PT-Identifier: PT-2026-24953 Vendor: Veeam Product: Backup and Replication CVSS: 10.0 Credits: n/a Description: A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server. References: • https://t.co/jp2KMmocwj •...

PT-2026-24952

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication affected versions not specified Description The software contains a flaw that allows an authenticated domain user to perform remote code execution RCE on the Backup Server. This could lead to compromise of backup...

CVE-2026-21668: Missing Authorization

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

PT-2026-24955

Name of the Vulnerable Software and Affected Versions Veeam Backup and Replication affected versions not specified Description The software contains a flaw that allows a user with domain access to execute code remotely on the Backup Server. The issue enables remote code execution RCE...

CVE-2026-21666: Improper Access Control

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-21667: Improper Access Control

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

Vulnerabilities Resolved in Veeam Backup & Replication 13.0.1.2067

All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 13.0.1.2067. Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program...

PT-2026-24954

Name of the Vulnerable Software and Affected Versions Veeam Backup and Replication affected versions not specified Description The software contains a flaw that allows an authenticated domain user to bypass intended restrictions. This allows manipulation of arbitrary files located on a Backup...

CVE-2026-21669: Improper Control of Generation of Code

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2025-23121

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

CVE-2025-13953

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...

CVE-2025-13953

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...

EUVD-2025-202412

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...

CVE-2025-13953 Bypass in the authentication method of the GTT Sistema de Información Tributario application

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...