Veeam backup products affected by vulnerabilities ahead of fixes
Original title: Veeam security advisory (AV26-1096)
The Canadian Cyber Centre lists affected builds of Agent for Linux, Backup and Replication, Backup for Microsoft 365 and Veeam ONE.
As of October 27, 2026, the Canadian Centre for Cyber Security says Veeam Agent for Linux, Veeam Backup and Replication, Veeam Backup for Microsoft 365 and Veeam ONE are affected by vulnerabilities. The alert, AV26-1096, dated October 28, 2026, gives affected version cutoffs and points to Veeam pages for issues resolved in Backup for Microsoft 365 8.6, Backup & Replication 13.1.2 and Veeam ONE 13.1 Patch 1. It urges administrators to review those links and apply necessary updates as they become available. No CVE identifiers or exploitation status are included.
Unconfirmed: The alert does not name the vulnerabilities, their impact, or whether any are being exploited.
- Veeam Agent for Linux is affected prior to 13.1.2.
- Backup and Replication is affected prior to 13.0.3 and prior to 13.1.2.
- Backup for Microsoft 365 is affected at or before 8.5.0.1014 and 8.6.0.1102.
- Veeam ONE is affected at or before 13.1.0.7233.
| Product | Affected | Fixed in |
|---|---|---|
| Veeam Agent for Linux | Prior to 13.1.2 | 13.1.2 |
| Veeam Backup and Replication | Prior to 13.0.3; prior to 13.1.2 | 13.1.2 |
| Veeam Backup for Microsoft 365 | Prior to or equal to 8.5.0.1014; prior to or equal to 8.6.0.1102 | 8.6 |
| Veeam ONE | Prior to or equal to 13.1.0.7233 | 13.1 Patch 1 |
- 1.Review the linked Veeam advisories and apply the necessary updates as they become available.
- Vendors
- Veeam
- Organizations
- Canadian Centre for Cyber Security
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1096 Date: October 28, 2026 As of October 27, 2026, Veeam is affected by vulnerabilities in the following products: Veeam Agent for Linux Prior to 13. 1. 2 Veeam Backup and Replication Prior to 13.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.