Advisory List of Security Fixes and Improvements in Veeam Recovery Orchestrator
This security Veeam advisory covers KB4857 affecting Veeam Recovery Orchestrator.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Get an email when Veeam publishes the next one.
VulniPulse checks Veeam's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.
Summary
List of Security Fixes and Improvements in Veeam Recovery Orchestrator
KB ID: 4857
Product:
Published: 2026-05-27
Last Modified:
Purpose
13.1.2.25
- axios upgraded to version 1.20.0
- BouncyCastle. Cryptography upgraded to version 2.7.0
- dompurify upgraded to version 3.4.13
- Microsoft. PowerShell.SDK upgraded to version 7.4.20 (net8.0) and 7.6.6 (net10.0)
13.1.0.483
- follow-redirects upgraded to version 1.16.0
- form-data upgraded to version 4.0.6
- happy-dom upgraded to version 20.11.0
- vite upgraded to version 8.0.8
13.0.3.26
- MailKit upgraded to version 4.16.0
- Microsoft. AspNetCore. DataProtection. Extensions upgraded to version 8.0.29
- MimeKit upgraded to version 4.16.0
13.0.2.27
- System. Security. Cryptography.XML was upgraded to 9.0.16.
- AutoMapper was removed.
- uuid was upgraded to 14.0.0.
- react-router-dom was upgraded to 6.30.3.
More Information
Related Articles
If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative. Check it before change work.
Official advisory · low-confidence parse· fetched 11 hours ago·verify at source
- Veeam Recovery Orchestrator 13.1.2.25
- Veeam Recovery Orchestrator 13.1.0.483
- Veeam Recovery Orchestrator 13.0.3.26
- Veeam Recovery Orchestrator 13.0.2.27
Official advisory · low-confidence parse· fetched 11 hours ago·verify at source
Mitigation checklist
- List of Security Fixes and Improvements in Veeam Recovery Orchestrator KB ID: 4857 Product: Veeam Recovery Orchestrator Published: 2026-05-27 Last Modified: 2026-10-27 Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Recovery Orchestrator.
- This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases to help them make an informed decision on whether it is critical to upgrade from their current Veeam Recovery Orchestrator version to a later one.
Official advisory · low-confidence parse· fetched 11 hours ago·verify at source
More Veeam advisories
- CVE-2023-22793Oct 29, 2026Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1
- CVE-2025-64394Oct 27, 2026Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6
- CVE-2026-105477Oct 27, 2026Release Information for Veeam Backup & Replication 13 and Updates
- CVE-2026-105477Oct 27, 2026Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2
- CVE-2026-107671Oct 27, 2026Vulnerabilities Resolved in Veeam ONE 13.1 Patch 1
- CVE-2026-111943Oct 22, 2026Mitigating Impact of Compromised eMudhra Intermediate CA Certificates on Veeam Kasten
Android app · Google Play
Monitor Veeam Veeam Recovery Orchestrator from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.