CVE-2022-26503

CVE-2022-26503 Summary: Vulnerability CVE-2022-26503 in Veeam Agent for Microsoft Windows allows local privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code with LOCAL SYSTEM privileges. Shout out to @ultrayoba The Patch: The implemented patch...

CVE-2024-40711

CVE-2024-40711 Exploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 See our blog post for technical details https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC in Action CVE-2024-40711.exe -f binaryformatter -g Veeam -c...

CVE-2024-40711-Exp

Usages .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp, --targetveeamport=VALUE The target Veeam...

CVE-2023-27532

CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup and Replication Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Summary This POC abuses an unsecured API...

CVE-2024-29849

CVE-2024-29849 Veeam Backup Enterprise Manager Authentication Bypass CVE-2024-29849 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Supported versions? According to Veeam official advisory...

VeeamDumper-BOF

Veeam Dumper BOF A credential extraction BOF for Veeam Backup and Replication and Veeam One by Stephen Munro and Logan Kroeger from @MWRCyberSec. The BOF needs to be executed in an Admin beacon on either a Veeam One or Veeam Backup and Replication server and supports Cobalt Strike and Outflank C2...

CVE-2023-27532

CVE-2023-27532 Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution. Overview For a detailed analysis of the vulnerability and exploitation please read the Rapid7 AttackerKB Analysis. Building Open in Visual Studio. You will nee...

veeam-velociraptor

Veeam Backup & Replication Velociraptor artifacts - PoC This repository contains a collection of Velociraptor artifacts acting as a proof-of-concept for a remote Veeam Backup & Replication forensics pipeline: artifacts/ contains the artifact definitions tools/ contains a qemu-img.zip archive that...

CVE-2024-29855

CVE-2024-29855 Veeam Recovery Orchestrator Authentication Bypass CVE-2024-29855 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Veeam published a CVSS 9 advisory for a authentication bypas...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Veeam Backup & Replication Vulnerability Vulnerability Description Veeam Backup & Replication contains a vulnerability that allows encrypted credentials stored in the configuration database to be obtained, allowing attackers to access backup infrastructure hosts. Nuclei Template...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule THIS IS NOT AN ORIGINAL EXPLOIT. THIS IS AN AUDITED VERSION FOR A THM BOX Below are the links for the original, tryhackme box and my writeup for the box:...

CVE-2026-32996

CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

CVE-2026-44963-veeam-checker

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

CVE-2024-42448-RCE

CVE-2024-42448-RCE Veeam Service Provider Console VSPC remote code execution. Download link here Details: is a critical vulnerability identified in the Veeam Service Provider Console VSPC with a CVSS score of 9.9. This vulnerability allows for remote code execution RCE. About: files.zip here you'...

CVE-2023-27532-RCE-Only

Forked Version RCE Only Forked repository and removed the credential leak part. Applied fixes for compilation. CVE-2023-27532 Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution. Overview For a detailed analysis of the...

CVE-2026-58073-check

Veeam Service Provider Console Agent Impersonation — Patch-State Detection Script A safe, unauthenticated detector for the KB4893 vulnerabilities in Veeam Service Provider Console published 2026-08-04. It answers one question per target, before any authentication or TLS: are the KB4893 fixes...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

CVE-2026-98432 Impact Statement

Summary CVE-2026-98432 is a use-after-free vulnerability in Linux kernel TCP/IPv4 connection setup CVSS 9.8. It can lead to denial of service or memory corruption. Veeam components that include a Linux kernel are affected. Depending on the component, the patched kernel is delivered through Veeam...

Veeam Software Appliance Fails to Boot with Kernel Panic on AMD EPYC Hosts

Challenge The Linux kernel used by the Veeam Software Appliance Linux-based Veeam Backup & Replication intermittently stops the boot process on hosts with certain AMD EPYC processors, including after a reboot or on the first boot after installation. The following kernel panic occurs during early...

How to Change the Veeam Reverse Proxy Service Port (443) After Deployment

Purpose This article documents how to adjust the Primary service port default 443 on a Windows-based Veeam Backup & Replication deployment after installation, and how to update the remote consoles that connect to it. Starting in Veeam Backup & Replication 13.1, the software consolidates client...