Export limit exceeded: 418276 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (45 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-106076 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account. | ||||
| CVE-2026-106077 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges. | ||||
| CVE-2026-106078 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service. | ||||
| CVE-2025-64394 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service. | ||||
| CVE-2026-108142 | 1 Veeam | 1 Backup And Replication | 2026-10-27 | N/A |
| A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. | ||||
| CVE-2026-108141 | 1 Veeam | 1 Backup And Replication | 2026-10-27 | N/A |
| A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal. | ||||
| CVE-2026-108140 | 1 Veeam | 1 Backup And Replication | 2026-10-27 | N/A |
| A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal. | ||||
| CVE-2026-44963 | 1 Veeam | 1 Backup And Replication | 2026-10-25 | N/A |
| A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. | ||||
| CVE-2025-64393 | 1 Veeam | 1 Backup And Replication | 2026-10-25 | N/A |
| This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. | ||||
| CVE-2025-64392 | 1 Veeam | 1 Backup Enterprise Manager | 2026-10-07 | N/A |
| This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link. | ||||
| CVE-2026-93026 | 1 Veeam | 1 Backup And Replication | 2026-10-07 | N/A |
| This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials. | ||||
| CVE-2026-58069 | 1 Veeam | 1 Backup And Replication | 2026-10-07 | N/A |
| This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. | ||||
| CVE-2026-58070 | 1 Veeam | 1 Backup And Replication | 2026-08-27 | N/A |
| A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials. | ||||
| CVE-2026-56844 | 1 Veeam | 1 Backup And Replication | 2026-08-04 | N/A |
| A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system. | ||||
| CVE-2026-21708 | 1 Veeam | 2 Backup And Recovery, Veeam Backup \& Replication | 2026-06-05 | 9.9 Critical |
| A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. | ||||
| CVE-2026-32996 | 1 Veeam | 1 Backup And Replication | 2026-05-28 | N/A |
| This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. | ||||
| CVE-2026-32997 | 1 Veeam | 1 Backup And Replication | 2026-05-28 | N/A |
| A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server. | ||||
| CVE-2026-21669 | 1 Veeam | 2 Backup And Replication, Veeam Backup \& Replication | 2026-05-10 | 10 Critical |
| A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | ||||
| CVE-2026-21668 | 1 Veeam | 2 Backup And Replication, Veeam Backup \& Replication | 2026-05-10 | 8.8 High |
| A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. | ||||
| CVE-2026-21672 | 1 Veeam | 1 Backup And Recovery | 2026-05-10 | 8.8 High |
| A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers. | ||||