VEEAM has issued urgent updates to address critical security vulnerabilities in its backup and management tools. Notable vulnerabilities include CVE-2026-32998, a critical remote code execution (RCE) issue discovered in the Veeam Service Provider Console, which has a CVSS score of 9.4. Updates also fix local privilege escalation vulnerabilities in Veeam Agent for Windows (CVE-2026-32996) and an arbitrary file write flaw in the Veeam Software Appliance for Linux (CVE-2026-32997). Administrators are strongly encouraged to apply these patches to safeguard their systems against potential exploits.
Veeam fixes critical RCE flaw CVE-2026-32998 in backup tools
CyberSIXT Evidence Panel
Article by CyberSIXT