Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution

2026-03-13

1 min read

by info@thehackernews.com (The Hacker News)

Receive daily AI-curated summaries of engineering articles from top tech companies worldwide.

Veeam has released patches addressing 7 critical vulnerabilities in its Backup & Replication software that could allow remote code execution.

•CVE-2026-21666 and CVE-2026-21667 (CVSS 9.9): Authenticated domain users can perform remote code execution on the Backup Server.
•CVE-2026-21668 (CVSS 8.8): Authenticated domain users can bypass restrictions and manipulate arbitrary files on a Backup Repository.
•CVE-2026-21672 (CVSS 8.8): Allows local privilege escalation on Windows-based Veeam servers.
•CVE-2026-21708 (CVSS 9.9): A Backup Viewer can execute code as the postgres user.
•Flaws affect Veeam Backup & Replication 12.3.2.4165 and earlier; fixed in 12.3.2.4465 and 13.0.1.2067.

This summary was automatically generated by AI based on the original article and may not be fully accurate.

Related Articles