Veeam Backup & Replication Information Disclosure Vulnerability
CSIRTS triage
- What
- An information disclosure vulnerability exists in Veeam Backup & Replication allowing unauthorized exposure of sensitive data.
- Who is affected
- Deployments of Veeam Backup & Replication without the patch applied.
- Urgency
- Information disclosure in backup infrastructure poses risk to data confidentiality; patch promptly to prevent credential or configuration exposure.
- Action
- Obtain and deploy the security patch for Veeam Backup & Replication from Veeam's advisory.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Backup & Replication
Get an email when a new Backup & Replication advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.hkcert.org/security-bulletin/veeam-backup-and-replication-information-disclosure-vulnerability_20260826
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-58070 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for Veeam Backup &
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[NEW] [medium] Veeam Backup & Replication: Vulnerability allows privilege escalationcert-bund · 2026-07-23
- medium[NEW] [medium] Veeam Backup & Replication (Veeam Updater): Vulnerability allows gaining administrator rightscert-bund · 2026-07-16
- unknownVulnerability in Veeam Backup & Replication (July 15, 2026)cert-fr-avis · 2026-07-15
- criticalexploitedCVE-2024-40711: Veeam Backup and Replication Deserialization Vulnerabilitycisa-kev · 2024-10-17
- criticalexploitedCVE-2023-27532: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerab…cisa-kev · 2023-08-22
- criticalexploitedCVE-2022-26500: Veeam Backup & Replication Remote Code Execution Vulnerabilitycisa-kev · 2022-12-13
More from HKCERT Security Bulletins
- unknownGoogle Chrome Multiple Vulnerabilities2026-08-26
- unknownZimbra Multiple Vulnerabilities2026-08-24
- unknownMicrosoft Edge Multiple Vulnerabilities2026-08-24
- unknownGoogle Chrome Multiple Vulnerabilities2026-08-21
- unknownSplunk Products Multiple Vulnerabilities2026-08-20