CVE-2025-59469

Critical CVSS: 9.0

This vulnerability allows a Backup or Tape Operator to write files as root.

Vendor

Product

CWE

Yayın Tarihi

2026-01-08 17:15:48

Güncelleme

2026-01-14 20:58:51

Source Identifier

support@hackerone.com

KEV Date Added

CWE-200 Veeam Backup \& Replication CRITICAL Veeam 2026

https://www.veeam.com/kb4792

Critical

CVE-2026-21666

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

Critical

CVE-2026-21667

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

High

CVE-2026-21668

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup…

Critical

CVE-2026-21669

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

High

CVE-2026-21670

A vulnerability allowing a low-privileged user to extract saved SSH credentials.

Critical

CVE-2026-21671

A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE)…