Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
24 results
Oct 27, 2026A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.CVE-2026-108142 · Other software · Veeam · reported by support@hackerone.comCritical 9.1
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 27, 2026A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controCVE-2026-108141 · Other software · Veeam · reported by support@hackerone.comMedium 5.9
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 27, 2026A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controCVE-2026-108140 · Other software · Veeam · reported by support@hackerone.comMedium 5.9
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2026This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.CVE-2026-93026 · Other software · Veeam · reported by support@hackerone.comMedium 6.1
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2026This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.CVE-2026-58069 · Other software · Veeam · reported by support@hackerone.comHigh 8.3
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2026This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.CVE-2025-64393 · Other software · Veeam · reported by support@hackerone.comCritical 9.4
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 26, 2026A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recoverCVE-2026-58070 · Other software · Veeam · reported by support@hackerone.comMedium 6.8
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 21, 2026A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level accCVE-2026-56844 · Other software · Veeam · reported by support@hackerone.comHigh 8.4
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2026A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.CVE-2026-44963 · Other software · Veeam · reported by support@hackerone.comCritical 9.4
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 28, 2026A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.CVE-2026-32997 · Other software · Veeam · reported by support@hackerone.comHigh 8.6
A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 28, 2026This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.CVE-2026-32996 · Other software · Veeam · reported by support@hackerone.comHigh 7.3
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2026A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.CVE-2026-21709 · Other software · Veeam · reported by support@hackerone.comMedium 6.7
A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2026A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.CVE-2026-21708 · Other software · Veeam · reported by support@hackerone.comCritical 9.9
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2026A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.CVE-2026-21672 · Other software · Veeam · reported by support@hackerone.comHigh 8.8
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2026A vulnerability allowing a low-privileged user to extract saved SSH credentials.CVE-2026-21670 · Other software · Veeam · reported by support@hackerone.comHigh 7.7
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2026A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.CVE-2026-21669 · Other software · Veeam · reported by support@hackerone.comCritical 9.9
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2026A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.CVE-2026-21668 · Other software · Veeam · reported by support@hackerone.comHigh 8.8
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2026A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.CVE-2026-21667 · Other software · Veeam · reported by support@hackerone.comCritical 9.9
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2026A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.CVE-2026-21666 · Other software · Veeam · reported by support@hackerone.comCritical 9.9
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 30, 2025A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.CVE-2025-48984 · Other software · Veeam · reported by support@hackerone.comHigh 8.8
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 30, 2025A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenCVE-2025-48983 · Other software · Veeam · reported by support@hackerone.comCritical 9.9
A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.
- Product
- Backup and Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 4, 2025NAKIVO Backup and Replication Absolute Path Traversal VulnerabilityCVE-2024-48248 · Other software · NAKIVO · reported by MITREExploitedHigh 8.6
NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files.
- Product
- Backup and Replication
- On CISA’s list since
- Mar 19, 2025 (federal fix deadline Apr 9, 2025)
- What to do
- Attackers are using this now. Install NAKIVO’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA cataloghelpcenter.nakivo.comlabs.watchtowr.com
Sep 7, 2024Veeam Backup and Replication Deserialization VulnerabilityCVE-2024-40711 · Other software · Veeam · reported by support@hackerone.comExploitedRansomwareCritical 9.8
Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.
- Product
- Backup & Replication
- On CISA’s list since
- Oct 17, 2024 (federal fix deadline Nov 7, 2024)
- What to do
- Attackers are using this now. Install Veeam’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogveeam.comlabs.watchtowr.com
Jun 30, 2021Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting.CVE-2021-35971 · Other software · Veeam · reported by MITRECritical 9.8
Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting.
- Product
- Veeam Backup & Replication
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.