[NEW] [medium] Veeam Backup & Replication (Veeam Updater): Vulnerability allows gaining administrator rights
A local attacker can exploit a vulnerability in Veeam Backup & Replication to gain administrator rights.
CSIRTS triage
- What
- A vulnerability allows a local attacker to gain administrator rights.
- Who is affected
- Local users of Veeam Backup & Replication.
- Urgency
- Remediation is necessary to prevent unauthorized privilege escalation.
- Action
- Apply the latest security updates for Veeam Backup & Replication.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Backup & Replication
Get an email when a new Backup & Replication advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2368
Recent advisories for Veeam Backup &
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[NEW] [medium] Veeam Backup & Replication: Vulnerability allows privilege escalationcert-bund · 2026-07-23
- unknownVulnerability in Veeam Backup & Replication (July 15, 2026)cert-fr-avis · 2026-07-15
- criticalexploitedCVE-2024-40711: Veeam Backup and Replication Deserialization Vulnerabilitycisa-kev · 2024-10-17
- criticalexploitedCVE-2023-27532: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerab…cisa-kev · 2023-08-22
- criticalexploitedCVE-2022-26501: Veeam Backup & Replication Remote Code Execution Vulnerabilitycisa-kev · 2022-12-13
- criticalexploitedCVE-2022-26500: Veeam Backup & Replication Remote Code Execution Vulnerabilitycisa-kev · 2022-12-13
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-07-31
- medium[UPDATE] [medium] Linux Kernel (ntfs3): Vulnerability allows information disclosure2026-07-31