CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/03/2026 |
| CVE-2026-21668 | 中危6.5 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. | 12/03/2026 |
| CVE-2026-21667 | 高危8.8 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | 12/03/2026 |
| CVE-2026-21666 | 高危8.8 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | 12/03/2026 |
| CVE-2025-59470 | 严重9.0 | This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter. | 08/01/2026 |
| CVE-2025-59469 | 严重9.0 | This vulnerability allows a Backup or Tape Operator to write files as root. | 08/01/2026 |
| CVE-2025-59468 | 严重9.1 | This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a
malicious password parameter. | 08/01/2026 |
| CVE-2025-55125 | 严重9.8 | This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious
backup configuration file. | 08/01/2026 |
| CVE-2025-48984 | 高危8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. | 31/10/2025 |
| CVE-2025-48983 | 严重9.9 | A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user. | 31/10/2025 |
| CVE-2025-48982 | 高危7.8 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into restoring a malicious file. | 31/10/2025 |
| CVE-2025-24286 | 中危4.9 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. | 19/06/2025 |
| CVE-2025-23121 | 高危8.8 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user | 19/06/2025 |
| CVE-2025-23120 | 高危8.8 | A vulnerability allowing remote code execution (RCE) for domain users. | 20/03/2025 |
| CVE-2025-23082 | 高危7.2 | Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. | 14/01/2025 |
| CVE-2024-45207 | 高危7.0 | DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently, allowing the attacker to ex | 04/12/2024 |
| CVE-2024-45206 | 中危6.5 | A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources. | 04/12/2024 |