CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Veeam Backup & Replication Authentication Bypass and Credential Exposure (CVE-2023-27532) Security Advisory
[Affected Scope] All deployments of Veeam Backup & Replication versions 11 and 12 (prior to patched builds).
[Impact] Unauthenticated remote attackers can obtain encrypted credentials stored in the configuration database, potentially gaining full access to backup infrastructure hosts.
[Mitigation] Apply the official security patches immediately, or restrict access to the Veeam Backup Service port (TCP 9401) using firewall rules.
Veeam Backup & Replication Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2022-26501)
[Affected Scope] Veeam Backup & Replication versions 10.x and 11.x
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges, leading to backup data theft and infrastructure compromise
[Mitigation] Immediately apply the official vendor patch (KB4288) or restrict access to vulnerable ports and services
Veeam Backup & Replication Path Traversal and Remote Code Execution (RCE) Vulnerability Advisory (CVE-2022-26500)
[Affected Scope] Veeam Backup & Replication versions 9.5U3, 9.5U4, 10.x, and 11.x
[Impact] Remote authenticated attackers can access internal API functions, upload arbitrary files, and execute malicious code with SYSTEM privileges
[Mitigation] Apply the official vendor patch (KB4288) immediately or restrict network access to vulnerable ports