Skip to content
VulniPulse
Sign in
Advisory severityUnratedVeeam Exploited CISA KEV Updated

Advisory [CVE-2026-105477 +13] Release Information for Veeam Backup & Replication 13 and Updates

This security Veeam advisory covers CVE-2026-105477 and CVE-2026-108140 and 12 more CVEs.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations. This bulletin covers 14 CVEs; its score, affected versions and guidance may apply to different issues within that bulletin.

KB4738 Source published

VulniPulse record published Record updated

CVE-2026-105477CVE-2026-108140CVE-2026-108141CVE-2026-108142CVE-2026-21669CVE-2026-21670CVE-2026-21671CVE-2026-21672CVE-2026-21708CVE-2026-31431CVE-2026-32996CVE-2026-32997CVE-2026-58069CVE-2026-58070
Related products & platforms
VeeamBackup & Replication
Open source advisory

Get an email when Veeam publishes the next one.

VulniPulse checks Veeam's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.

Start your free month

Summary

Release Information for Veeam Backup & Replication 13 and Updates

KB ID: 4738

Product:

Published: 2025-09-03

Last Modified: 2026-10-29

13.1.2.57

This cumulative patch addresses issues, reports, and feedback received from customers, partners, service providers, and the community. The top-reported issues are listed below.

Want to get rid of manual patching? Upgrade to the latest version and receive all future patches automatically through Veeam Updater.

This patch becomes available through Veeam Updater as soon as the Veeam update repository is updated. It is then rolled out to Veeam Software Appliance 13.1 installations and, gradually, to all Windows-based Veeam Backup & Replication 13.1 deployments.

To upgrade right away, download the 13.1 installation media now from My Account.

Security

Vulnerabilities

Third-Party Components

  • Compromised root CA certificates (Comodo AAA Services root and the affected emSign roots) are removed from the trust store of the Veeam Software Appliance and from Veeam components.

New features and enhancements

General

  • The Veeam Backup & Replication ISO and the Veeam Software Appliance ISO include Veeam Plug-In for Google Cloud v8.1.

VMware vSphere

  • Added support for VMware vCenter Server 9.1.1. Jobs no longer log a warning that the vCenter Server API version is higher than the tested version.

Scale-Out Backup Repository

CISA Known Exploited Vulnerability

Listed:
May 1, 2026 · federal remediation due May 15, 2026
Required action:
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

KEV is a prioritization signal from CISA. Remediation detail comes from the vendor advisory.

Affected versions
  • 13.1.2.11
  • 13.1.2.4
  • 13.1.2.2270
  • 13.1.1.18

Official advisory · medium-confidence parse· fetched 17 hours ago·verify at source

Fixed versions
  • Veeam Software Appliance 13.1
  • Veeam Agent for Microsoft Windows 13.1.2.812
  • Veeam Agent for Linux 13.1.2.11
  • Veeam Agent for Mac 13.1.2.4
  • Veeam Agent for IBM AIX 13.1.2.2270
  • Veeam Agent for Oracle Solaris 13.1.2.2270
  • Veeam Agents Veeam Agent for Microsoft Windows 13.1.1.700
  • Veeam Agent for Linux 13.1.1.4

Official advisory · medium-confidence parse· fetched 17 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Release Information for Veeam Backup & Replication 13 and Updates KB ID: 4738 Product: Veeam Backup & Replication | 13 | 13.1 Published: 2025-09-03 Last Modified: 2026-10-29 Release Information 13.1.2.57 2026-10-27 This cumulative patch addresses issues, reports, and feedback received from customers, partners, service providers, and the community.
  • Upgrade to the latest version and receive all future patches automatically through Veeam Updater.
  • This patch becomes available through Veeam Updater as soon as the Veeam update repository is updated.
  • To upgrade right away, download the 13.1 installation media now from My Account.
  • The limit applies in the console, Web UI, and PowerShell.
  • Upgrade and Veeam Updater Upgrade through Veeam Updater takes about 30 minutes longer than expected because the Veeam Backup Service waits for a response from the updater.
  • Veeam Updater on Windows cannot upgrade the backup server if the Veeam Backup Service runs under a custom account.
  • Backup of VMs on isolated networks takes minutes longer because the job tries to update guest components that are not installed.

Official advisory · medium-confidence parse· fetched 17 hours ago·verify at source

More Veeam advisories

All Veeam advisories

Android app · Google Play

Monitor future Veeam CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Get CVE alertsSee app features

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.