Back to Feed
VulnerabilitiesMar 13, 2026

Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution

Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that could allow remote code execution. The vulnerabilities include CVE-2026-21666 (CVSS 9.9) and CVE-2026-21667, with the former allowing authenticated domain users to execute remote code on the Backup Server.

Summary

Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that could allow remote code execution. The vulnerabilities include CVE-2026-21666 (CVSS 9.9) and CVE-2026-21667, with the former allowing authenticated domain users to execute remote code on the Backup Server.

Indicators of Compromise

  • cve — CVE-2026-21666
  • cve — CVE-2026-21667