Known vulnerabilities in Backup & Replication

Vendor: Veeam
Software: Backup & Replication
Software CPE: cpe:2.3:a:veeam:backup_and_replication:*:*:*:*:*:*:*:*
Website: https://www.veeam.com/
Total vulnerabilities: 39
Public exploits: 2
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Backup & Replication Backup & Replication is affected by 39 known vulnerabilities: 1 critical, 5 high, 23 medium, 10 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145353 - Cleartext Storage of Sensitive Information
CVE-2026-58070		 CWE-312 Low
No
No
 13.0.3.63, 13.1.0.411 25.08.2026 SB20260825117
#VU134000 - Improper Access Control
CVE-2026-44963		 CWE-284 Medium
No
No
 12.3.2.4854 09.06.2026 SB2026060931
#VU132380 - Improper Privilege Management
CVE-2026-32996		 CWE-269 Low
No
No
 13.0.2.29 27.05.2026 SB2026052779
#VU132381 - Improper Access Control
CVE-2026-32997		 CWE-284 Low
No
No
 13.0.2.29 27.05.2026 SB2026052779
#VU123974 - Improper input validation
CVE-2026-21671		 CWE-20 Low
No
No
 13.0.1.2067 12.03.2026 SB2026031251
#VU123973 - Permissions, Privileges, and Access Controls
CVE-2026-21670		 CWE-264 Medium
No
No
 13.0.1.2067 12.03.2026 SB2026031251
#VU123972 - Improper input validation
CVE-2026-21669		 CWE-20 Medium
No
No
 13.0.1.2067 12.03.2026 SB2026031251
#VU123971 - Improper input validation
CVE-2026-21708		 CWE-20 Medium
No
No
 12.3.2.4465, 13.0.1.2067 12.03.2026 SB2026031251
#VU123970 - Permissions, Privileges, and Access Controls
CVE-2026-21672		 CWE-264 Low
No
No
 12.3.2.4465, 13.0.1.2067 12.03.2026 SB2026031251
#VU123969 - Protection Mechanism Failure
CVE-2026-21668		 CWE-693 Medium
No
No
 12.3.2.4465 12.03.2026 SB2026031251
#VU123968 - Improper input validation
CVE-2026-21667		 CWE-20 Medium
No
No
 12.3.2.4465 12.03.2026 SB2026031251
#VU123967 - Improper input validation
CVE-2026-21666		 CWE-20 Medium
No
No
 12.3.2.4465 12.03.2026 SB2026031251
#VU121002 - Improper input validation
CVE-2025-59470		 CWE-20 Low
No
No
 13.0.1.1071 06.01.2026 SB2026010648
#VU121001 - Permissions, Privileges, and Access Controls
CVE-2025-59469		 CWE-264 Low
No
No
 13.0.1.1071 06.01.2026 SB2026010648
#VU121000 - Improper input validation
CVE-2025-59468		 CWE-20 Low
No
No
 13.0.1.1071 06.01.2026 SB2026010648
#VU120999 - Improper input validation
CVE-2025-55125		 CWE-20 Low
No
No
 13.0.1.1071 06.01.2026 SB2026010648
#VU116987 - Permissions, Privileges, and Access Controls
CVE-2025-48984		 CWE-264 Medium
No
No
 12.3.2.4165 14.10.2025 SB2025101450
#VU116986 - Permissions, Privileges, and Access Controls
CVE-2025-48983		 CWE-264 Medium
No
No
 12.3.2.4165 14.10.2025 SB2025101450
#VU111219 - Permissions, Privileges, and Access Controls
CVE-2025-24286		 CWE-264 Medium
No
No
 12.3.2.3617 17.06.2025 SB2025061726
#VU111218 - Improper input validation
CVE-2025-23121		 CWE-20 High
No
No
 12.3.2.3617 17.06.2025 SB2025061726


Showing elements 1 - 20 out of 39