Veeam Backup and Replication path traversal vulnerability

Veeam Backup and Replication versions prior to 13.0 and between 13.0.3 and 13.1, as well as versions prior to 13.1 and between 13.1 and 13.2, contain a path traversal vulnerability. This vulnerability arises because authenticated users possessing the Restore Operator role can, by manipulating the...

Veeam Backup and Replication path traversal vulnerability

Veeam Backup and Replication versions 13.0 through 13.0.3 and 13.1 through 13.1.2 contain a path traversal vulnerability. This vulnerability stems from relative path traversal; authenticated users with the Restore Operator role can control the contents of backed-up NAS shares, allowing them to...

Veeam Backup and Replication improper exception handling vulnerability

Versions 13.0 prior to Veeam Backup and Replication 13.0.3, as well as version 13.1 prior to 13.1.2, contain an improper exception handling vulnerability. This vulnerability stems from improper authorization mechanisms within the CDP Coordinator Service, potentially allowing unauthenticated...

Veeam Backup and Replication < 12.3.2 (kb4934)

The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4934 advisory. - A reflected cross-site scripting vulnerability in Veeam Backup Enterprise Manager allows an attacker to execut...

Build Numbers and Versions of Veeam Plug-In for Xen

This KB article lists all versions of the Veeam Plug-In for Xen and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Xen 1 Releases Veeam Plug-In for Xen 1.1 Included with Veeam Backup & Replication 13.1.2 | 13.1.1.7 | 2026-10-27...

Veeam Backup and Replication code-related vulnerabilities

Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. Veeam Backup and Replication has a code vulnerability that stems from allowing authenticated domain users to execute code remotely...

Failed to install Veeam Analytics Service. Failed to establish connection between the Veeam ONE server and Veeam Analytics service. Operation timed out: 10

Challenge After upgrading Veeam ONE to version 13.0.x, the Veeam Analytics Service installation fails with the following error: Failed to install Veeam Analytics Service. Failed to establish connection between the Veeam ONE server and Veeam Analytics service. Operation timed out: 10. The failure...

PT-2026-26287

We're not migrating to Veeam B&R 13.0.1 until the end of the year, as Veeam B&R is supported until 01 Feb 2027, and we're not find of adopting applications before a couple of version releases have been made. We noticed Action1 appears to be incorrectly assigning CVE's affecting Veeam B&R 13.0.1.x...

Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication

Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a "critical" issue that could result in remote code execution RCE. The vulnerability, tracked as CVE-2025-59470, carries a CVSS score of 9.0. "This vulnerability allows a Backup or Tape...

NAKIVO Director Unauthorized Access

The vulnerability of the Director component in NAKIVO’s backup, replication, and virtual machine recovery system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

EUVD-2020-7506

Malware in sbrugna...

EUVD-2022-31062

Malicious code in bioql PyPI...

Applying Custom Settings to Veeam Software Appliance

Purpose This article documents the configuration files on the Veeam Software Appliance that correspond to registry locations in Windows used for custom settings in Veeam Backup & Replication. Custom registry-based settings for Veeam Backup & Replication on Windows can also be applied to the Veeam...

Release Information for Veeam Plug-in for Proxmox VE v12.1.5.17

Requirements This update to the Veeam Plug-in for Proxmox VE requires: Veeam Backup & Replication build 12.3.2.3617 You can check the build number in the Veeam Backup & Replication Console's Main Menu ≡ under Help About. Veeam Plug-in for Proxmox VE build 12.1.3.217 You can check the current buil...

Build Numbers and Versions of Veeam Plug-In for Scale Computing HyperCore

This KB article lists all versions of the Veeam Plug-In for Scale Computing HyperCore and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Scale Computing HyperCore 4 Releases Veeam Plug-In for Scale Computing HyperCore 4.2...

Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication

Veeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions. The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9.9 out of a maximum of 10.0. "A vulnerability...

PT-2025-25742

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions 12 through 12.3.2.3600 Description A flaw in the input validation mechanism allows an authenticated domain user to achieve remote code execution RCE on the backup server. This issue specifically impacts back...

CVE-2020-15518

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests...

PT-2025-8692

Name of the Vulnerable Software and Affected Versions NAKIVO Backup & Replication affected versions not specified Description The issue concerns an arbitrary file read vulnerability in NAKIVO Backup & Replication. Over 4,100 services have been found to be vulnerable. Approximately 208 vulnerable...