Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-21709 EUVD-2026-23438

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

Published Apr 17, 2026 · Updated Apr 20, 2026 · Assigned by hackerone

Vendor: Veeam Product: Backup and Replication Product: Software Appliance

Description

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

Affected products

VendorProductAffectedFixed
Veeam Backup and Replication 12 – < 12.3.2 12.3.2
Veeam Software Appliance 13 – < 13.0.1 13.0.1

References