Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-21671 EUVD-2026-11583GHSA-9prx-6fqf-vvjh

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabili…

Published Mar 12, 2026 · Updated May 10, 2026 · Assigned by hackerone

Description

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication.

Affected products

VendorProductAffectedFixed
Veeam Software Appliance 13.0.1 – < 13.0.1 13.0.1

Advisories 2

References