Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

概要

参考情報

• veeam.com/kb4424 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2023-27532

veeam backup & replication のその他の脆弱性

• CVE-2026-21708緊急 9.9A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
• CVE-2026-21671緊急 9.1A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabilit…
• CVE-2026-21670中 6.5A vulnerability allowing a low-privileged user to extract saved SSH credentials.
• CVE-2026-21669緊急 9.9A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
• CVE-2026-21668中 6.5A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.