EUVD-2026-94225

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

CVE-2026-58069

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

CVE-2026-58069

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

EUVD-2025-211039

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

CVE-2025-64393

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

CVE-2025-64393

A critical vulnerability (CVSS 4.0: 9.4) exists in Veeam Backup & Replication (build 12.3.2.4854 and earlier version 12 builds) due to insecure deserialization of untrusted data received via the Mount Service . This flaw allows a low-privileged user with the Backup Viewer role to perform remote c...

CVE-2025-64393

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

CVE-2025-64393: Deserialization of Untrusted Data

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server...

CVE-2026-58068: Missing Authorization

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

CVE-2025-64391: Insecure Operation on Windows Junction / Mount Point

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

CVE-2025-64392: Improper Neutralization of Input During Web Page Generation

This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...

PT-2026-107430

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

CVE-2026-58069: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host...

CVE-2026-93026: Missing Authorization

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

PT-2026-107423

This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...

PT-2026-107431

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication affected versions not specified Description An authenticated Cloud Connect tenant can read arbitrary files on the service provider host. Recommendations At the moment, there is no information about a newer version th...

PT-2026-107422

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

PT-2026-107434

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...

Veeam Backup and Replication < 12.3.2 (kb4934)

The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4934 advisory. - A reflected cross-site scripting vulnerability in Veeam Backup Enterprise Manager allows an attacker to execut...

PT-2026-107228

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions prior to 12.3.2 P4 Description A deserialization issue allows a user with Backup Viewer privileges to execute arbitrary code as SYSTEM on the backup server. Deserialization is the process of converting a dat...