CVE-2026-21708
CRITICALVeeam Backup and Replication Backup Viewer - Postgres User Remote Code Execution
Title source: manualDescription
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
References (2)
Core 2
Core References
Various Sources
https://www.veeam.com/kb4831
Various Sources
https://www.veeam.com/kb4830
Scores
CVSS v3
9.9
EPSS
0.0109
EPSS Percentile
61.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-89
Status
published
Products (3)
Veeam/Backup and Replication
12 - 12.3.2
Veeam/Backup and Replication
13 - 13.0.1
veeam/veeam_backup_\&_replication
12.0.0.1402 - 12.3.2.4465.
Published
Mar 12, 2026
Tracked Since
Mar 13, 2026