CVE-2022-26504

Published: Mar 17, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe

Affected (12)

Products: Veeam: Veeam Backup & Replication

Veeam

1 product

Veeam Backup & Replication

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Veeam Veeam Backup & Replication	10.0.0.4442 ≤ version < 10.0.1.4854
Veeam Veeam Backup & Replication	11.0.0.825 ≤ version < 11.0.1.1261
Veeam Veeam Backup & Replication	Version 10.0.1.4854
Veeam Veeam Backup & Replication	Version 10.0.1.4854 p20201202
Veeam Veeam Backup & Replication	Version 10.0.1.4854 p20210609
Veeam Veeam Backup & Replication	Version 10.0.1.4854 p20220304
Veeam Veeam Backup & Replication	Version 11.0.1.1261
Veeam Veeam Backup & Replication	Version 11.0.1.1261 p20211123
Veeam Veeam Backup & Replication	Version 11.0.1.1261 p20211211
Veeam Veeam Backup & Replication	Version 11.0.1.1261 p20220302
Veeam Veeam Backup & Replication	Version 9.5.0.1536
Veeam Veeam Backup & Replication	Version 9.5.4.2615