Veeam security advisory (AV26-1009)
Canada’s Cyber Centre urges updates for vulnerabilities in Veeam Backup & Replication.
The Canadian Centre for Cyber Security published advisory AV26-1009 on October 7, 2026, warning that Veeam Backup & Replication contains vulnerabilities. Builds before 12.3.2.P4, 13.03, and 13.1 are listed as affected. The centre points administrators to Veeam KB4934, which covers fixes in 12.3.2 P4, and urges them to apply available updates. The bulletin does not name CVE identifiers or report active exploitation.
- Canadian advisory AV26-1009 covers Veeam Backup and Replication.
- Versions before 12.3.2.P4, 13.03, and 13.1 are affected.
- Administrators are directed to Veeam KB4934 and available patches.
- The alert names no CVEs and does not report exploitation.
Full article70 words · extracted from cyber.gc.ca · click to collapse
Serial number: AV26-1009
Date: October 7, 2026
As of October 7, 2026, Veeam is affected by vulnerabilities in the following product:
- Veeam Backup and Replication
- Prior to 12.3.2.P4
- Prior to 13.03
- Prior to 13.1
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Text extracted automatically; images, tables and formatting may be missing. Original: https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-1009