CVE-2022-26501

Published: Mar 17, 2022Modified: Jun 17, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

Products: Veeam: Veeam Backup & Replication

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Veeam Veeam Backup & Replication	10.0.0.4442 ≤ version < 10.0.1.4854
Veeam Veeam Backup & Replication	11.0.0.825 ≤ version < 11.0.1.1261
Veeam Veeam Backup & Replication	Version 10.0.1.4854
Veeam Veeam Backup & Replication	Version 10.0.1.4854 p20201202
Veeam Veeam Backup & Replication	Version 10.0.1.4854 p20210609
Veeam Veeam Backup & Replication	Version 11.0.1.1261
Veeam Veeam Backup & Replication	Version 11.0.1.1261 p20211123
Veeam Veeam Backup & Replication	Version 11.0.1.1261 p20211211