Veeam Software Appliance

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 28, 2026
Last mentioned2d ago

Timeline

2 articles · newest first

Veeam patches critical Backup & Replication authorization bypass

Unauthenticated attackers can bypass CDP Coordinator checks; fixed builds are 13.1.2.57 and 13.0.3.63, with no exploitation reported.

Cyber Security Newsupdated Oct 29, 13:42 UTC · 1d agofirst Oct 28, 11:31 UTC · 2d agoVulnerability 4 sourcesCVE-2026-108142 CVE-2026-108140 CVE-2026-108141+11

Veeam patches critical unauthenticated authorization bypass in Backup & Replication

CVE-2026-108142 hits 13.0 and 13.1 branches; fixes are 13.0.3.63 and 13.1.2.57, and 12.x is unaffected.

GBHackersupdated Oct 29, 13:42 UTC · 1d agofirst Oct 28, 11:23 UTC · 2d agoVulnerability 4 sourcesCVE-2026-108142 CVE-2026-108140 CVE-2026-108141+12 · 1 read

Related CVEs

by mentions

CVE-2026-1081429.1
Unauthenticated authorization bypass in CDP Coordinator Service
published 3d agoCDP Coordinator Service
CVE-2026-1054777.3
Local privilege escalation in managed Veeam Agent for Linux
published 3d agoVeeam Agent for Linux
CVE-2026-1081415.9
Relative path traversal file write via Restore Operator
published 3d ago
CVE-2026-1081405.9
Relative path traversal to arbitrary files on a backup server
published 3d ago

Appears with

Veeamvendor · 2
HackerOneorganization · 1
Backup & Replicationproduct · 1
Veeam Backup & Replicationproduct · 1
Agent for Linuxproduct · 1
Veeam Agent for Linuxproduct · 1

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.