Backup Viewer RCE Exposes postgres User Privileges
CVE-2026-21708 Published on March 12, 2026
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
Affected Versions
Veeam Backup and Recovery:- Version 12.3.2 and below 12.3.2 is affected.
- Version 13.0.1 and below 13.0.1 is affected.
Exploit Probability
EPSS
1.11%
Percentile
78.09%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.