High · 7.7 CVE-2026-21670 EUVD-2026-11581GHSA-qmvm-ccq4-rpc7

A vulnerability allowing a low-privileged user to extract saved SSH credentials.

Published Mar 12, 2026 · Updated May 10, 2026 · Assigned by hackerone

Vendor: Veeam Product: Backup and Replication

Description

A vulnerability allowing a low-privileged user to extract saved SSH credentials.

Affected products

Vendor	Product	Affected	Fixed
Veeam	Backup and Replication	13.0.1 – < 13.0.1	13.0.1

Advisories 2

WID-SEC-2026-0709 Veeam Backup & Replication: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 12, 2026
NCSC-2026-0096 Kwetsbaarheden verholpen in Veeam Backup & Replication NCSC-NL (Netherlands) · Mar 12, 2026

References

https://www.veeam.com/kb4831