CVE-2023-27532

CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup and Replication Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Summary This POC abuses an unsecured API...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

CVE-2026-93026

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

CVE-2026-58069

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

CVE-2025-64393

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

CVE-2026-93026

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

CVE-2026-93026

This vulnerability in Veeam Backup & Replication allows an authenticated user with the Backup Viewer role to modify or delete the Enterprise Manager master key and read or overwrite stored antivirus update credentials on the Veeam Backup Server. The issue impacts Veeam Backup & Replication 12.3.2...

EUVD-2026-94227

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

CVE-2026-93026

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

CVE-2026-58069

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

EUVD-2026-94225

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

CVE-2026-58069

A vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. This issue impacts Windows-based deployments. The vulnerability was resolved in the following versions: Veeam Backup & Replication 13.1 (build 13.1.0.41...

CVE-2026-58069

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

CVE-2025-64393

A critical vulnerability (CVSS 4.0: 9.4) exists in Veeam Backup & Replication (build 12.3.2.4854 and earlier version 12 builds) due to insecure deserialization of untrusted data received via the Mount Service . This flaw allows a low-privileged user with the Backup Viewer role to perform remote c...

EUVD-2025-211039

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

CVE-2025-64393

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

CVE-2025-64393

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

PT-2026-107434

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

PT-2026-107431

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

Access Denied for ListBuckets/GetBuckets on S3-Compatible Repositories

Challenge When adding an S3-compatible object storage repository to Veeam Backup & Replication, or during regular use of an existing one, Access Denied events related to a ListBuckets/GetBuckets operation may appear in the object storage system's access logs. These issues occur even though the...