Veeam Vulnerabilities and Affected Products
Vulnerabilities associated with Software Appliance.
Products
Clear product- One18 vulnerabilities
- Backup & Replication16 vulnerabilities
- Backup and Replication14 vulnerabilities
- Backup and Recovery13 vulnerabilities
- Service Provider Console10 vulnerabilities
- service_provider_console7 vulnerabilities
- backup_\&_replication6 vulnerabilities
- Veeam Service Provider Console5 vulnerabilities
- agent4 vulnerabilities
- backup_enterprise_manager4 vulnerabilities
- backup_and_replication3 vulnerabilities
- Recovery Orchestrator3 vulnerabilities
- Agent for Windows2 vulnerabilities
- Availability Orchestrator2 vulnerabilities
- Backup for Microsoft Azure2 vulnerabilities
- One Agent2 vulnerabilities
- Software Appliance2 vulnerabilities
- veeam_backup_\&_replication2 vulnerabilities
- Agent for Microsoft Windows1 vulnerability
- Backup and Recovery1 vulnerability
- Backup for AWS1 vulnerability
- Backup for Google Cloud1 vulnerability
- Backup for Microsoft Windows1 vulnerability
- Backup for Nutanix AHV1 vulnerability
- Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-21709MEDIUM | Generated title:Veeam Backup and Replication Windows Driver Signature Enforcement BypassA vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement. CWE-77Apr 17, 2026 | CVSS6.7v3.1 | EPSS0.171% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-21671CRITICAL | Generated title:Veeam Backup & Replication Authenticated Remote Code Execution in High Availability DeploymentsA vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication. | CVSS9.1v3.1 | EPSS1.33% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |