Actively exploited in the wild
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Veeam - Backup & Replication · Listed in the CISA KEV since 2023-08-22. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-27532
HighCVSS 7.5KEVSummary
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
Risk Assessment
An attacker could gain access to the backup infrastructure, potentially leading to data theft or destruction.
Recommendation
Update Veeam Backup & Replication to the latest version containing the fix.
Other vulnerabilities in Veeam Backup & Replication
See all- CVE-2026-21672High
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
- CVE-2026-21671Critical
The vulnerability allows an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication.
- CVE-2024-40711CriticalActively exploited
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
- CVE-2022-26501CriticalActively exploited
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
- CVE-2022-26500HighActively exploited
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4, 10.x, and 11.x. A remote authenticated user can access internal API functions and upload and execute arbitrary code.
Original NVD description (English source)
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.