Summary
Ein Angreifer kann mehrere Schwachstellen in Veeam Backup & Replication ausnutzen, um beliebigen Programmcode auszuführen, sich erweiterte Berechtigungen zu verschaffen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
Product
Veeam Backup & Replication ist eine Datensicherungslösung für VMware vSphere- und Microsoft Hyper-V-Umgebungen.
Vulnerabilities 8
-
Critical 10.0
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
-
Critical 10.0
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
-
Critical 10.0
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
-
Critical 9.9
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
-
Critical 9.1
A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE…
-
High 8.8
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup…
-
High 8.8
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
-
High 7.7
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-11577, EUVD-2026-11579, EUVD-2026-11581, EUVD-2026-11583, EUVD-2026-11574, EUVD-2026-11576, EUVD-2026-11595, EUVD-2026-11597
-
#1
Initiale Fassung
References
-
Veeam Support Knowledge Base vom 2026-03-11
https://www.veeam.com/kb4830
-
Veeam Support Knowledge Base vom 2026-03-11
https://www.veeam.com/kb4831