Veeam security advisory (AV26-513) – Update 1
Canada's Cyber Centre warns CVE-2026-32996 is being exploited and urges Veeam updates.
The Canadian Centre for Cyber Security updated advisory AV26-513 on September 21, 2026, covering Veeam fixes first published on May 27. The updates address Veeam Backup & Replication 13 before 13.0.2.29, Veeam ONE before 13.0.2.6723, and Veeam Service Provider Console 9.2 before 9.2.1.33875. Update 1 says open-source reporting indicates CVE-2026-32996 is being exploited in the wild. The centre urges users and administrators to review Veeam's notices and apply the updates.
- Advisory AV26-513 was updated on September 21 after May 27 Veeam fixes.
- Backup & Replication before 13.0.2.29, ONE before 13.0.2.6723, and Console before 9.2.1.33875 are affected.
- Open-source reporting says CVE-2026-32996 is exploited in the wild.
- The Cyber Centre urges administrators to apply the vendor updates.
- CVEs
- CVE-2026-32996
- Vendors
- Veeam
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-32996 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation | 7.3 | <1% | PoC |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-513 Date: May 27, 2026 Updated: September 21, 2026 On May 27, 2026, Veeam published security advisories to address vulnerabilities in the following products: Veeam Backup & Replication – 13 versions prior to 13. 0. 2.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.