VulnerabilitiesMar 13, 2026
Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution
Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that could allow remote code execution. The vulnerabilities include CVE-2026-21666 (CVSS 9.9) and CVE-2026-21667, with the former allowing authenticated domain users to execute remote code on the Backup Server.
Summary
Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that could allow remote code execution. The vulnerabilities include CVE-2026-21666 (CVSS 9.9) and CVE-2026-21667, with the former allowing authenticated domain users to execute remote code on the Backup Server.
Indicators of Compromise
- cve — CVE-2026-21666
- cve — CVE-2026-21667