CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-03-17
Veeam Backup & Replication Path Traversal and Remote Code Execution (RCE) Vulnerability Advisory (CVE-2022-26500)
[Affected Scope] Veeam Backup & Replication versions 9.5U3, 9.5U4, 10.x, and 11.x
[Impact] Remote authenticated attackers can access internal API functions, upload arbitrary files, and execute malicious code with SYSTEM privileges
[Mitigation] Apply the official vendor patch (KB4288) immediately or restrict network access to vulnerable ports