PT-2026-24957 · Veeam · Veeam Backup & Replication

Publicado 2026-03-12 · Atualizado 2026-03-13 · CVE-2026-21671

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication (affected versions not specified)

Description The software contains a flaw that allows a user authenticated with the Backup Administrator role to execute code remotely (RCE) in high availability (HA) deployments. This impacts Veeam Backup & Replication installations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Access Control

Code Injection

Enumeração de Fraquezas

CWE-284

CWE-94

Identificadores relacionados

BDU:2026-05180

CVE-2026-21671

Produtos afetados

Veeam Backup & Replication

Referências · 7

• https://bdu.fstec.ru/vul/2026-05180 · Nota de Segurança
• https://twitter.com/CveFindCom/status/2032120279837679663 · Publicação no Twitter
• https://veeam.com/kb4831 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2032128793478140046 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2032410957151170721 · Publicação no Twitter
• https://twitter.com/ptdbugs/status/2032383711103046084 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-21671 · Nota de Segurança