Home Veeam CVE-2026-21672
Back to Veeam

CVE-2026-21672

Veeam Backup & Replication

Veeam CVSS 8.8 Updated March 15, 2026

Executive Risk Summary

"A vulnerability in Veeam Backup & Replication allows local privilege escalation on Windows-based servers, potentially granting attackers elevated access to sensitive data and system resources. This vulnerability poses a significant risk to data integrity and system security, necessitating prompt mitigation."

Operational Audit Arsenal

Target Type Executable
Target Asset Veeam.Backup.Manager.exe
Standard Path %ProgramFiles%\Veeam\Backup and Replication\
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Veeam.Backup.Manager.exe (Executable)
$Targets = 'Veeam.Backup.Manager.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Backup services may be affected

Internal Work Notes

Local privilege escalation vulnerability in Veeam Backup & Replication requires patching to prevent potential data breaches and system compromises.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Veeam Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.