PT-2026-24953 · Veeam · Backup/Replication

Published 2026-03-12 · Updated 2026-03-14 · CVE-2026-21667

X.com · Ptdbugs

CVSS v3.1

9.9

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVE: CVE-2026-21667 PT-Identifier: PT-2026-24953 Vendor: Veeam Product: Backup and Replication CVSS: 10.0 Credits: n/a

Description: A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

References: • https://t.co/jp2KMmocwj • https://t.co/IOPABZq4vT

#dbugs vuln

Fix

RCE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-21667

Affected Products

Backup/Replication

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2026-21667 · Security Note
• https://twitter.com/CVEnew/status/2032410959592235457 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1rstnim/veeam_alerts_critical_rce_flaws_in_backup · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1rsfcxj/veeam_patches_7_critical_backup_replication_flaws · Reddit Post
• https://twitter.com/TweetThreatNews/status/2032466733341057050 · Twitter Post
• https://veeam.com/kb4830 · Note
• https://twitter.com/CveFindCom/status/2032120239198994453 · Twitter Post
• https://twitter.com/securityRSS/status/2032495259511386579 · Twitter Post
• https://twitter.com/johndjohnson/status/2032812264613621777 · Twitter Post
• https://twitter.com/TheHackerWire/status/2032123487595479289 · Twitter Post
• https://twitter.com/ptdbugs/status/2032383445205143802 · Twitter Post
• https://t.me/true_secator/7993 · Telegram Post
• https://reddit.com/r/KibernetinisSaugumas/comments/1rsmzj1/atsargin%C4%97s_kopijos_pavojuje_veeam_software · Reddit Post