Critical9.9Vendor: HighVeeam

Veeam Backup & Replication: vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

CVE-2026-21672 Published Mar 12, 2026Updated by vendor Jun 17, 2026

CVE-2026-21666CVE-2026-21667CVE-2026-21668CVE-2026-21672CVE-2026-21708CVE-2026-21709

Affected products & platforms

VeeamBackup & Replication

Open vendor advisory

Summary

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

Fixed versions

12.3.2.4465
12.3.2

Official advisory · high-confidence parse· fetched 6 hours ago·verify at source

Mitigation

Mitigation steps weren't captured by the parser for this advisory — this is a parsing gap, not a statement that no fix exists. Read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 6 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

Veeam Knowledge Base — Security Advisoriesofficial
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
Veeam
Vendor advisory pageofficial
Advisory page fetched and parsed to extract affected/fixed versions and mitigation guidance beyond what the feed carries.
Veeam

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-21666NVD CVE.org MITRE
CVE-2026-21667NVD CVE.org MITRE
CVE-2026-21668NVD CVE.org MITRE
CVE-2026-21672NVD CVE.org MITRE
CVE-2026-21708NVD CVE.org MITRE
CVE-2026-21709NVD CVE.org MITRE

Official resources

Veeam Backup & Replication downloads (target: 12.3.2.4465 / 12.3.2)
Official documentation
This advisory names 12.3.2.4465 / 12.3.2 as the first fixed releases — official upgrade documentation for Veeam Backup & Replication.
VBR build numbers & versions (KB2680)
Knowledge base
Official build-number table — match your console's exact build against the fixed build before patching.
Veeam Knowledge Base (advisory source)
Official documentation
Canonical Veeam KB — the authoritative advisory text, affected builds and hotfixes.
Veeam Trust Center
Official documentation
Veeam's security and vulnerability-disclosure hub.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Veeam Backup & Replication: vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

CVE-2026-21672 Published Mar 12, 2026Updated by vendor Jun 17, 2026

CVE-2026-21666CVE-2026-21667CVE-2026-21668CVE-2026-21672CVE-2026-21708CVE-2026-21709

Affected products & platforms

VeeamBackup & Replication

Summary

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

Fixed versions

12.3.2.4465
12.3.2

Official advisory · high-confidence parse· fetched 6 hours ago·verify at source

Mitigation

Mitigation steps weren't captured by the parser for this advisory — this is a parsing gap, not a statement that no fix exists. Read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 6 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

Veeam Knowledge Base — Security Advisoriesofficial
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
Veeam
Vendor advisory pageofficial
Advisory page fetched and parsed to extract affected/fixed versions and mitigation guidance beyond what the feed carries.
Veeam

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-21666NVD CVE.org MITRE
CVE-2026-21667NVD CVE.org MITRE
CVE-2026-21668NVD CVE.org MITRE
CVE-2026-21672NVD CVE.org MITRE
CVE-2026-21708NVD CVE.org MITRE
CVE-2026-21709NVD CVE.org MITRE

Official resources

Veeam Backup & Replication downloads (target: 12.3.2.4465 / 12.3.2)
Official documentation
This advisory names 12.3.2.4465 / 12.3.2 as the first fixed releases — official upgrade documentation for Veeam Backup & Replication.
VBR build numbers & versions (KB2680)
Knowledge base
Official build-number table — match your console's exact build against the fixed build before patching.
Veeam Knowledge Base (advisory source)
Official documentation
Canonical Veeam KB — the authoritative advisory text, affected builds and hotfixes.
Veeam Trust Center
Official documentation
Veeam's security and vulnerability-disclosure hub.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.