poslední zpráva · zachyceno
SPOJENO AI EPSS 0.00 (nejvyšší)
Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.1, CVEs: CVE-2026-108142, CVE-2026-108140, CVE-2026-108141, CVE-2026-105477, Summary: CVE-2026-108142 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. Severity: Critical CVSS v4.0 Score: 9.1 Affected Deployment Type: Windows-based Veeam Backup & Replication | Veeam Software Appliance Affected Product Veeam Backup & Replication 13.1.1.18 and all…
Veeam FI CA IT FR
CVE v události 9
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2025-64394 | 4.3 4.0 · hackerone | – | 0.00 |
| CVE-2026-105477 | 7.3 4.0 · hackerone | – | 0.00 |
| CVE-2026-106076 | 9.0 4.0 · hackerone | – | 0.00 |
| CVE-2026-106077 | 8.3 4.0 · hackerone | – | 0.00 |
| CVE-2026-106078 | 6.9 4.0 · hackerone | – | 0.00 |
| CVE-2026-107671 | 8.5 4.0 · hackerone | – | 0.00 |
| CVE-2026-108140 | 5.9 4.0 · hackerone | – | 0.00 |
| CVE-2026-108141 | 5.9 4.0 · hackerone | – | 0.00 |
| CVE-2026-108142 | 9.1 4.0 · hackerone | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.1.
Jak se o tom psalo 4
-
· zachyceno · NCSC-FI FI nadpis události
Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.1, CVEs: CVE-2026-108142, CVE-2026-108140, CVE-2026-108141, CVE-2026-105477, Summary: CVE-2026-108142 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. Severity: Critical CVSS v4.0 Score: 9.1 Affected Deployment Type: Windows-based Veeam Backup & Replication | Veeam Software Appliance Affected Product Veeam Backup & Replication 13.1.1.18 and all…
-
· Cyber Centre Kanada CA
Veeam security advisory (AV26-1096)
Serial number: AV26-1096 Date: October 28, 2026 As of October 27, 2026, Veeam is affected by vulnerabilities in the following products: Veeam Agent for Linux Prior to 13.1.2 Veeam Backup and Replication Prior to 13.0.3 Prior to 13.1.2 Veeam Backup for Microsoft 365 Prior to or equal to 8.5.0.1014 Prior to or equal to 8.6.0.1102 Veeam ONE Prior to or equal to 13.1.0.7233 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they…
-
· CSIRT Itálie (ACN) IT
Aggiornamenti di sicurezza per prodotti Veeam
Veeam ha rilasciato aggiornamenti di sicurezza per risolvere 9 vulnerabilità, di cui 2 con gravità “critica” e 3 con gravità “alta”, nei prodotti Backup and Replication, ONE, Agent per Linux e Backup per Microsoft 365.
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans les produits Veeam (28 octobre 2026)
De multiples vulnérabilités ont été découvertes dans les produits Veeam. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.