CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/03/2026 |
| CVE-2026-21668 | 보통6.5 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. | 12/03/2026 |
| CVE-2026-21667 | 높음8.8 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | 12/03/2026 |
| CVE-2026-21666 | 높음8.8 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | 12/03/2026 |
| CVE-2025-59470 | 심각9.0 | This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter. | 08/01/2026 |
| CVE-2025-59469 | 심각9.0 | This vulnerability allows a Backup or Tape Operator to write files as root. | 08/01/2026 |
| CVE-2025-59468 | 심각9.1 | This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a
malicious password parameter. | 08/01/2026 |
| CVE-2025-55125 | 심각9.8 | This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious
backup configuration file. | 08/01/2026 |
| CVE-2025-48984 | 높음8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. | 31/10/2025 |
| CVE-2025-48983 | 심각9.9 | A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user. | 31/10/2025 |
| CVE-2025-48982 | 높음7.8 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into restoring a malicious file. | 31/10/2025 |
| CVE-2025-24286 | 보통4.9 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. | 19/06/2025 |
| CVE-2025-23121 | 높음8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user | 19/06/2025 |
| CVE-2025-23120 | 높음8.8 | A vulnerability allowing remote code execution (RCE) for domain users. | 20/03/2025 |
| CVE-2025-23082 | 높음7.2 | Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. | 14/01/2025 |
| CVE-2024-45207 | 높음7.0 | DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently, allowing the attacker to ex | 04/12/2024 |
| CVE-2024-45206 | 보통6.5 | A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources. | 04/12/2024 |