Veeam Backup für Microsoft 365: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Veeam Backup für Microsoft 365 ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Angriff auszulösen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-42174 linked CVEs
Open advisory with all CVEs
More on Microsoft
Other advisories
- HighCVE-2026-118147Microsoft Visual Studio: unzureichende Zertifikatvalidierung
- HighCVE-2026-118147Microsoft Visual Studio: unzureichende Zertifikatvalidierung
- Not ratedosv:CLEANSTART-2023-PI61748xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)
- Not ratedosv:CLEANSTART-2023-HO33843xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)
- Not ratedosv:CLEANSTART-2023-PG96753xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)
- Not ratedosv:CLEANSTART-2023-TI21903xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)
- Not ratedosv:CLEANSTART-2023-UL91479xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)
- Not ratedosv:CLEANSTART-2023-ZN29047xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)
Other news entries
- Microsoft finally fixes VPN issues caused by September updatesNewsBleepingComputer
- Microsoft Edge: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Microsoft Edge: Mehrere Schwachstellen ermöglichen CodeausführungVulnerabilityBSI CERT-Bund
- Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatchedNewsThe Register — Security
- Microsoft fixes Remote Desktop failures caused by recent Windows updatesNewsBleepingComputer
- Windows 11 KB5127936 update released with 41 changes and fixesNewsBleepingComputer
- Microsoft Edge: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans Veeam Backup for Microsoft 365 (29 octobre 2026)NewsCERT-FR (ANSSI)
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4217
ID