Export limit exceeded: 21503 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (115 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-106076 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account. | ||||
| CVE-2026-106077 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges. | ||||
| CVE-2026-106078 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service. | ||||
| CVE-2025-64394 | 1 Veeam | 1 Backup For Microsoft 365 | 2026-10-28 | N/A |
| A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service. | ||||
| CVE-2026-108142 | 1 Veeam | 1 Backup And Replication | 2026-10-27 | N/A |
| A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. | ||||
| CVE-2026-105477 | 1 Veeam | 1 Agent For Linux | 2026-10-27 | N/A |
| A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected. | ||||
| CVE-2026-107671 | 1 Veeam | 1 One | 2026-10-27 | N/A |
| A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification. | ||||
| CVE-2026-108141 | 1 Veeam | 1 Backup And Replication | 2026-10-27 | N/A |
| A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal. | ||||
| CVE-2026-108140 | 1 Veeam | 1 Backup And Replication | 2026-10-27 | N/A |
| A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal. | ||||
| CVE-2026-44963 | 1 Veeam | 1 Backup And Replication | 2026-10-25 | N/A |
| A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. | ||||
| CVE-2025-64393 | 1 Veeam | 1 Backup And Replication | 2026-10-25 | N/A |
| This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. | ||||
| CVE-2026-58068 | 1 Veeam | 1 Veeam Agent For Windows | 2026-10-09 | N/A |
| This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system. | ||||
| CVE-2025-64391 | 1 Veeam | 1 Veeam Agent For Windows | 2026-10-09 | N/A |
| This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it. | ||||
| CVE-2025-64392 | 1 Veeam | 1 Backup Enterprise Manager | 2026-10-07 | N/A |
| This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link. | ||||
| CVE-2026-93026 | 1 Veeam | 1 Backup And Replication | 2026-10-07 | N/A |
| This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials. | ||||
| CVE-2026-58069 | 1 Veeam | 1 Backup And Replication | 2026-10-07 | N/A |
| This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. | ||||
| CVE-2026-65641 | 1 Veeam | 1 One | 2026-08-27 | N/A |
| A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. | ||||
| CVE-2026-64632 | 1 Veeam | 1 One | 2026-08-27 | N/A |
| A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account. | ||||
| CVE-2026-58070 | 1 Veeam | 1 Backup And Replication | 2026-08-27 | N/A |
| A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials. | ||||
| CVE-2026-58075 | 1 Veeam | 1 One | 2026-08-05 | N/A |
| A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally. | ||||