Export limit exceeded: 374361 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (97 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-58075 | 1 Veeam | 1 One | 2026-08-05 | N/A |
| A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally. | ||||
| CVE-2026-58071 | 1 Veeam | 1 Service Provider Console | 2026-08-04 | N/A |
| A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins. | ||||
| CVE-2026-64633 | 1 Veeam | 1 One | 2026-08-04 | N/A |
| A vulnerability allowing remote unauthenticated code execution on the agent host. | ||||
| CVE-2026-58067 | 1 Veeam | 1 Service Provider Console | 2026-08-04 | N/A |
| A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service. | ||||
| CVE-2026-64634 | 1 Veeam | 1 One | 2026-08-04 | N/A |
| A vulnerability allowing local privilege escalation to the Reporter service context. | ||||
| CVE-2026-64631 | 1 Veeam | 1 One | 2026-08-04 | N/A |
| A vulnerability allowing a low-privileged user to inject SQL and extract database contents. | ||||
| CVE-2026-58073 | 1 Veeam | 1 Service Provider Console | 2026-08-04 | N/A |
| A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials. | ||||
| CVE-2026-64630 | 1 Veeam | 1 One | 2026-08-04 | N/A |
| A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. | ||||
| CVE-2026-58074 | 1 Veeam | 1 One | 2026-08-04 | N/A |
| A vulnerability allowing a high-privileged user to execute arbitrary code on the server. | ||||
| CVE-2026-58072 | 1 Veeam | 1 Service Provider Console | 2026-08-04 | N/A |
| A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution. | ||||
| CVE-2026-56844 | 1 Veeam | 1 Backup And Replication | 2026-08-04 | N/A |
| A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system. | ||||
| CVE-2026-64635 | 1 Veeam | 1 Service Provider Console | 2026-08-03 | 5.3 Medium |
| Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to an attacker-controlled host, allowing the attacker to take over the account. | ||||
| CVE-2026-44963 | 1 Veeam | 1 Backup And Replication | 2026-06-24 | N/A |
| A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. | ||||
| CVE-2026-21671 | 1 Veeam | 2 Software Appliance, Veeam Backup \& Replication | 2026-06-18 | 9.1 Critical |
| A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication. | ||||
| CVE-2026-21708 | 1 Veeam | 2 Backup And Recovery, Veeam Backup \& Replication | 2026-06-05 | 9.9 Critical |
| A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user. | ||||
| CVE-2026-32998 | 1 Veeam | 1 Service Provider Console | 2026-05-29 | N/A |
| This vulnerability in Veeam Service Provider Console allows for remote code execution. | ||||
| CVE-2026-32996 | 1 Veeam | 1 Backup And Replication | 2026-05-28 | N/A |
| This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. | ||||
| CVE-2026-32997 | 1 Veeam | 1 Backup And Replication | 2026-05-28 | N/A |
| A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server. | ||||
| CVE-2026-21669 | 1 Veeam | 2 Backup And Replication, Veeam Backup \& Replication | 2026-05-10 | 10 Critical |
| A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server. | ||||
| CVE-2026-21668 | 1 Veeam | 2 Backup And Replication, Veeam Backup \& Replication | 2026-05-10 | 8.8 High |
| A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. | ||||