PT-2026-24953 · Veeam · Veeam Backup & Replication

Publicado

2026-03-12

·

Atualizado

2026-03-14

·

CVE-2026-21667

CVSS v3.1

9.9

Crítica

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Veeam Backup and Replication (affected versions not specified)
Description This issue allows an authenticated domain user to perform remote code execution (RCE) on the Backup Server. The vulnerability enables an attacker to execute arbitrary code on the affected system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2026-05181
CVE-2026-21667

Produtos afetados

Veeam Backup & Replication