Backup Replication Veeam Backup Replication

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Veeam Backup Replication.

By the Year

In 2026 there have been 0 vulnerabilities in Veeam Backup Replication. Backup Replication did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 1 0.00
2023 1 7.50
2022 3 9.13

It may take a day or so for new Backup Replication vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Veeam Backup Replication Security Vulnerabilities

Unauthenticated RCE via deserialization in Unknown Component
CVE-2024-40711 - September 07, 2024

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

Marshaling, Unmarshaling

Veeam Backup & Replication CVE-2023-27532 Credential Disclosure via Config DB
CVE-2023-27532 7.5 - High - March 10, 2023

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

Missing Authentication for Critical Function

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions
CVE-2022-26500 8.8 - High - March 17, 2022

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.

Directory traversal

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM)
CVE-2022-26504 8.8 - High - March 17, 2022

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe

authentification

Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
CVE-2022-26501 9.8 - Critical - March 17, 2022

Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

Missing Authentication for Critical Function

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Veeam Backup Replication or by Veeam? Click the Watch button to subscribe.

Veeam
Vendor

subscribe