Vulnerability in Veeam Backup & Replication (July 15, 2026)
A vulnerability has been discovered in Veeam Backup & Replication. It allows an attacker to cause privilege escalation.
CSIRTS triage
- What
- A vulnerability allows an attacker to cause privilege escalation.
- Who is affected
- Deployments of Veeam Backup & Replication are affected.
- Urgency
- Remediation is urgent due to the potential for privilege escalation.
- Action
- Apply patches as they become available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Backup & Replication
Get an email when a new Backup & Replication advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0878/
Recent advisories for Veeam Backup &
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[NEW] [medium] Veeam Backup & Replication: Vulnerability allows privilege escalationcert-bund · 2026-07-23
- medium[NEW] [medium] Veeam Backup & Replication (Veeam Updater): Vulnerability allows gaining administrator rightscert-bund · 2026-07-16
- criticalexploitedCVE-2024-40711: Veeam Backup and Replication Deserialization Vulnerabilitycisa-kev · 2024-10-17
- criticalexploitedCVE-2023-27532: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerab…cisa-kev · 2023-08-22
- criticalexploitedCVE-2022-26501: Veeam Backup & Replication Remote Code Execution Vulnerabilitycisa-kev · 2022-12-13
- criticalexploitedCVE-2022-26500: Veeam Backup & Replication Remote Code Execution Vulnerabilitycisa-kev · 2022-12-13
More from CERT-FR Avis de sécurité
- unknownMultiples vulnérabilités dans le noyau Linux de Red Hat (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans les produits IBM (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux d'Ubuntu (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans PHP (31 juillet 2026)2026-07-31