Skip to content
Sign in
CVE-2026-1081415.9Medium

Veeam Backup and Replication vulnerability

Veeam · Backup and Replication

Not in CISA KEVVendor fix available

No EPSS score yet. The score appears once FIRST publishes it.

5.9MediumCVSS
LowMedium

DescriptionNVD

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 28 Oct.

  1. Veeam fixes five flaws in backup and monitoring software
    SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

Updated AboutDevelopersSign in