| CVE-2026-44963 | critical | 9.4 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain… | Jun 9, 2026 | Jun 10, 2026 |
| CVE-2026-32998 | critical | 9.4 | This vulnerability in Veeam Service Provider Console allows for remote code execution. | May 28, 2026 | May 29, 2026 |
| CVE-2026-32997 | high | 8.6 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary… | May 28, 2026 | May 29, 2026 |
| CVE-2026-32996 | high | 7.3 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. | May 28, 2026 | May 29, 2026 |
| CVE-2026-21708 | critical | 9.9 | A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user… | Mar 12, 2026 | Jun 5, 2026 |
| CVE-2026-21672 | high | 8.8 | A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication serv… | Mar 12, 2026 | Mar 13, 2026 |
| CVE-2026-21671 | critical | 9.1 | A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote … | Mar 12, 2026 | May 10, 2026 |
| CVE-2026-21670 | high | 7.7 | A vulnerability allowing a low-privileged user to extract saved SSH credentials. | Mar 12, 2026 | May 10, 2026 |
| CVE-2026-21669 | critical | 9.9 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the … | Mar 12, 2026 | May 10, 2026 |
| CVE-2026-21668 | high | 8.8 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrar… | Mar 12, 2026 | May 10, 2026 |
| CVE-2026-21667 | critical | 9.9 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the … | Mar 12, 2026 | Mar 31, 2026 |
| CVE-2026-21666 | critical | 9.9 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the … | Mar 12, 2026 | Mar 31, 2026 |
| CVE-2025-59470 | critical | 9.0 | This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres u… | Jan 8, 2026 | Jan 14, 2026 |
| CVE-2025-59469 | critical | 9.0 | This vulnerability allows a Backup or Tape Operator to write files as root. | Jan 8, 2026 | Jan 14, 2026 |
| CVE-2025-59468 | critical | 9.0 | This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postg… | Jan 8, 2026 | Jan 14, 2026 |
| CVE-2025-55125 | high | 7.8 | This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root b… | Jan 8, 2026 | Jan 12, 2026 |
| CVE-2025-48984 | high | 8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain… | Oct 31, 2025 | Nov 11, 2025 |
| CVE-2025-48983 | critical | 9.9 | A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code exe… | Oct 31, 2025 | Dec 1, 2025 |
| CVE-2025-48982 | high | 7.8 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a s… | Oct 31, 2025 | Dec 1, 2025 |
| CVE-2025-24286 | high | 7.2 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, … | Jun 19, 2025 | Jul 16, 2025 |
| CVE-2025-23121 | high | 8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain… | Jun 19, 2025 | Jul 15, 2025 |
| CVE-2025-23120 | high | 8.8 | A vulnerability allowing remote code execution (RCE) for domain users. | Mar 20, 2025 | Apr 2, 2025 |
| CVE-2025-23082 | high | 7.2 | Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow… | Jan 14, 2025 | Nov 18, 2025 |
| CVE-2024-45207 | high | 7.0 | DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure l… | Dec 4, 2024 | Jul 2, 2025 |
| CVE-2024-45206 | medium | 6.5 | A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbit… | Dec 4, 2024 | Jul 2, 2025 |
