CVE-2026-56844: Backup and Replication: vulnerability in the Veeam Updater component of the Veeam Software Appliance that could
This Veeam advisory covers CVE-2026-56844 in Backup and Replication.
- CVE-2026-56844
Key facts
- Vendor rating
- High, CVSS 8.4
- CISA KEV
- Not listed (catalogue checked )
- Fixed in
- 12.3.0.65
- Source published
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system. Affected product named by the advisory: Backup and Replication.
Text from the source record.
How to fix CVE-2026-56844
Upgrade to a fixed release named by Veeam:
- 12.3.0.65
Support dates for the fixed release lines
- Veeam Backup & Replication 12: support ends
More Veeam advisories
CVE-2021-35971Aug 25, 2026List of Security Fixes and Improvements in Veeam Backup & ReplicationCVE-2026-98432Nov 6, 2026Impact StatementCVE-2023-22793Oct 29, 2026Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1CVE-2025-64394Oct 27, 2026Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6CVE-2026-105477Oct 27, 2026Release Information for Veeam Backup & Replication 13 and UpdatesKB4857Oct 27, 2026List of Security Fixes and Improvements in Veeam Recovery Orchestrator
Get an email when Veeam Backup & Replication publishes the next one.
See Veeam Backup & Replication's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Veeam CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
