CVE-2022-26503

CVSS 3.1: 7.8 high
EPSS: <1%p51
Published: Mar 17, 2022 · Mar 17, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-26503 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system privileges.

Vendors: veeam

Products: veeam

Weakness: CWE-502

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story

Critical flaws affect Veeam Data Backup software

Security AffairsMar 15, 16:08 UTC · Mar 15, 2022VulnerabilityCVE-2022-26500 CVE-2022-26501 CVE-2022-26504+12 · 1 read