EUVD-2026-11597

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

EUVD-2026-11595

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-21672

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection in the exec.Command function via the compressionalgorithm parameter in API calls to the image and backup endpoints. An attacker can execute arbitrary commands as the LXD daemon by sending specially crafted...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection in the exec.Command function via the compressionalgorithm parameter in API calls to the image and backup endpoints. An attacker can execute arbitrary commands as the LXD daemon by sending specially crafted...

CVE-2026-21672

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers...

CVE-2026-21672

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers...

CVE-2026-21672

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-21672

CVE-2026-21672 is a local privilege escalation vulnerability affecting Windows-based Veeam Backup & Replication servers. Public docs confirm the flaw exists in 12.x builds prior to 12.3.2.4465 and in 13.x prior to 13.0.1.2067, with fixes shipped in those versions. Connected sources also link this...

CVE-2026-21708

CVE-2026-21708 : In Veeam Backup & Replication, a vulnerability allows a Backup Viewer to perform remote code execution (RCE) with the privileges of the PostgreSQL user. Affected are 12.x versions prior to 12.3.2.4465; CVE-21708 is also addressed in 13.0.1.2067 (alongside other fixes). The connec...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

EUVD-2026-11583

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup & Replication...

EUVD-2026-11579

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

EUVD-2026-11577

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

EUVD-2026-11576

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

EUVD-2026-11574

A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...

CVE-2026-28384

An improper sanitization of the compressionalgorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints. This issue affected LXD from 4.12 through 6.6 and was fixed in the sn...