PT-2026-24956 · Veeam · Backup/Replication+1

Publicado 2026-03-12 · Atualizado 2026-05-10 · CVE-2026-21670

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Veeam Backup and Replication (affected versions not specified)

Description A flaw exists that could allow a low-privileged user to obtain saved SSH credentials. The issue involves the potential extraction of these credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2026-21670

Produtos afetados

Backup/Replication

Veeam Backup & Replication

Referências · 5

• https://veeam.com/kb4831 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21670 · Nota de Segurança
• https://t.me/cveNotify/162933 · Publicação no Telegram
• https://twitter.com/ptdbugs/status/2032383682497900725 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2032410957969011149 · Publicação no Twitter