wid-sec-w-2026-0709 · Published 2026-03-11 · View on BSI CERT-Bund ↗

Veeam Backup & Replication: Multiple Vulnerabilities

CVSS 9.9 CRITICAL

Risk Summary

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.

CVE-2026-21666 CVE-2026-21667 CVE-2026-21668 CVE-2026-21669 CVE-2026-21670 CVE-2026-21671 CVE-2026-21672 CVE-2026-21708

Veeam

Veeam · Backup & Replication <13.0.1.2067

Veeam · Backup & Replication 13.0.1.2067

Veeam · Backup & Replication <12.3.2.4465

Veeam · Backup & Replication 12.3.2.4465

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.