Actively exploited in the wild
Veeam Backup & Replication Remote Code Execution Vulnerability
Veeam - Backup & Replication · Listed in the CISA KEV since 2022-12-13. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-26501
CriticalCVSS 9.8KEVSummary
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
Risk Assessment
Incorrect access control may allow unauthorized users to access functions or data that should be protected. This could lead to a breach of confidentiality or integrity of backups.
Recommendation
Update Veeam Backup & Replication to the latest patched version. Verify access permissions to the backup system.
Other vulnerabilities in Veeam Backup & Replication
See all- CVE-2026-21672High
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
- CVE-2026-21671Critical
The vulnerability allows an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication.
- CVE-2024-40711CriticalActively exploited
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
Original NVD description (English source)
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).