CVE-2026-21672

Published: Mar 12, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

Related CWEs

Insertion of Sensitive Information into Externally-Accessible File or Directory

The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.

References (2)

https://www.veeam.com/kb4830

Source: support@hackerone.com

https://www.veeam.com/kb4831

Source: support@hackerone.com

Timeline

No history available yet.