Product by Veeam
Veeam Backup \& Replication
42 known vulnerabilities in Veeam Backup \& Replication (Veeam), 4 of them actively exploited (CISA KEV).
Key figures
42
Vulnerabilities
4
Actively exploited (KEV)
4
Used by ransomware
18
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-40711 | Veeam Backup and Replication Deserialization Vulnerability In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2023-27532 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability In CISA KEVRansomware | 7.5 | |
| Critical | CVE-2022-26501 | Veeam Backup & Replication Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2022-26500 | Veeam Backup & Replication Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2025-23121 | Veeam Backup and Recovery: Remote Code Execution | 9.9 | |
| Critical | CVE-2025-23120 | Veeam Backup and Recovery: Remote Code Execution | 9.9 | |
| Critical | CVE-2024-29849 | Veeam Backup & Replication: security vulnerability | 9.8 | |
| High | CVE-2025-24286 | Veeam Backup and Recovery: Code Execution | 7.2 | |
| High | CVE-2024-42455 | Veeam Backup & Replication: Deserialization of Untrusted Data | 7.1 | |
| Critical | CVE-2025-59470 | Veeam Backup and Recovery: Remote Code Execution | 9.0 | |
| Critical | CVE-2026-21669 | Veeam Backup and Replication: Remote Code Execution | 10.0 | |
| Critical | CVE-2026-21671 | Veeam Software Appliance: Remote Code Execution | 9.1 | |
| High | CVE-2022-26504 | Veeam Backup and Recovery: Improper Authentication | 8.8 | |
| Critical | CVE-2026-21666 | Veeam Backup and Replication: Remote Code Execution | 10.0 | |
| Critical | CVE-2026-21667 | Veeam Backup and Replication: Remote Code Execution | 10.0 | |
| Critical | CVE-2026-21708 | Veeam Backup and Replication: SQL Injection | 9.9 | |
| Critical | CVE-2025-59468 | Veeam Backup and Recovery: Remote Code Execution | 9.0 | |
| Critical | CVE-2025-48983 | Veeam Backup and Replication: Remote Code Execution | 10.0 | |
| High | CVE-2025-48984 | Veeam Backup and Replication: Remote Code Execution | 8.8 | |
| Critical | CVE-2021-35971 | Veeam Backup and Recovery: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2024-40710 | Veeam Backup and Recovery: Remote Code Execution | 8.8 | |
| Critical | CVE-2025-55125 | Veeam Backup And Recovery: Remote Code Execution | 7.8 | |
| Critical | CVE-2025-59469 | Veeam Backup and Recovery: security vulnerability | 9.0 | |
| High | CVE-2024-40717 | Veeam Backup & Replication: Remote Code Execution | 8.8 | |
| High | CVE-2020-15518 | Veeam Availability Suite: security vulnerability | 8.8 |