Veeam Backup & Replication: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Veeam Backup & Replication ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-42124 linked CVEs
Open advisory with all CVEs
More on Replication
Other advisories
- Not ratedosv:CLEANSTART-2026-YY42516Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
- Not ratedosv:CLEANSTART-2026-XL27625Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
- CriticalCVE-2026-108142Veeam Backup & Replication: Mehrere Schwachstellen
- MediumCVE-2026-107755Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs
- MediumCVE-2026-108141Veeam Backup and Replication: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-108141Veeam Backup and Replication: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-108142Veeam Backup and Replication: unsicheres Fehlverhalten (Failing Open)
- CriticalCVE-2026-108142Veeam Backup and Replication: unsicheres Fehlverhalten (Failing Open)
Other news entries
- Angreifer können Veeam-Backup-Server manipulieren und MFA deaktivierenNewsheise Security
- Anthropic Finds Ingredients for Future AI WormsNewsDark Reading
- IBM InfoSphere Data Replication: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Veeam Backup & Replication: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code ExecutionNewsThe Hacker News
- 12-Year-Old PostgreSQL Vulnerability Enables Database, Server TakeoverNewsSecurityWeek
- Decade-old PostgreSQL flaw turns backup account into a backdoorNewsCSO Online
- Veeam Backup & Replication: Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4212
ID