Skip to content
VulniPulse
Sign in
Advisory severityCritical9.8Veeam Updated

Critical [CVE-2026-98432] Impact Statement

This critical-severity Veeam advisory covers CVE-2026-98432.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

KB4966 Source published

VulniPulse record published Record updated

CVE-2026-98432
Related products & platforms
VeeamBackup & ReplicationAgentsKasten
Open source advisory

Summary

CVE-2026-98432 Impact Statement

KB ID: 4966

Product: Veeam Backup & Replication

Veeam Software Appliance

Veeam Agent for Linux

Veeam Plug-In for AWS

Veeam Cloud Connect

Veeam Kasten for Kubernetes

Published:

Last Modified:

Article Updates

Veeam is monitoring this vulnerability and will update this article as new information becomes available.

CVE-2026-98432 is a use-after-free vulnerability in Linux kernel TCP/IPv4 connection setup (CVSS 9.8). It can lead to denial of service or memory corruption.

Veeam components that include a Linux kernel are affected. Depending on the component, the patched kernel is delivered through Veeam Updater or a private fix.

Action

Yes, until the kernel is updated Install the update through Veeam Updater

Veeam Infrastructure Appliance 13.1, with any of the following roles:

  • General-purpose backup proxy
  • VMware backup proxy
  • CDP proxy
  • Cache repository
  • Backup repository (Linux server)
  • Hardened repository
  • NFS share
  • Scale-out backup repository extent
  • Guest interaction proxy
  • Gateway server
  • Mount server
  • WAN accelerator
  • Log shipping server
  • Cloud gateway

Yes, until the private fix is installed

Private fix will be made available soon

Yes, for media created before the update

or download from this Veeam webpage.

Install all available updates through Veeam Updater

No.

Is CVE-2026-98432 exploited?

No exploitation is reported in the sources VulniPulse tracks: CVE-2026-98432 is not in the CISA KEV catalog (checked ) and this advisory does not report exploitation. That is not proof the vulnerability cannot be exploited.

How do I fix CVE-2026-98432?

Upgrade to a fixed release named by Veeam:

  • Veeam UpdaterVeeam Infrastructure Appliance 13.1
  • Veeam Infrastructure Appliance 13.1
  • Veeam Agent for Linux 13.1

Confirm against the vendor advisory before you patch.

Affected versions
  • 12.3
  • 13.1
  • 13.1.2.57

Official advisory · high-confidence parse· fetched 17 hours ago·verify at source

Fixed versions
  • Veeam UpdaterVeeam Infrastructure Appliance 13.1
  • Veeam Infrastructure Appliance 13.1
  • Veeam Agent for Linux 13.1

Official advisory · high-confidence parse· fetched 17 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • CVE-2026-98432 Impact Statement KB ID: 4966 Product: Veeam Backup & Replication Veeam Software Appliance Veeam Agent for Linux Veeam Plug-In for AWS Veeam Plug-In for Microsoft Azure Veeam Plug-In for Google Cloud Veeam Cloud Connect Veeam Kasten for Kubernetes Published: 2026-11-06 Last Modified: 2026-11-06 Article Updates Veeam is monitoring this vulnerability and will update this article as new information becomes available.
  • Veeam Recovery Media for the Veeam Agent for Linux version included with Veeam Backup & Replication 12.3 Yes, for media created before the update Private fix will be made available soon Veeam Plug-In for AWS, Veeam Plug-In for Google Cloud, and Veeam Plug-In for Microsoft Azure appliances Yes, until the kernel is updated Install all available updates through Veeam Updater Veeam Kasten for Kubernetes No.
  • Follow the advisory from the node operating system or Kubernetes platform vendor Linux servers managed by the customer Not a Veeam component Follow the advisory from the distribution vendor Swipe to show more of the table Solution Veeam Software Appliance and Veeam Infrastructure Appliance Since November 2, 2026, an update that contains the fix for CVE-2026-98432 has been available in the Veeam repository for Veeam Software Appliance and Veeam Infrastructure Appliance 13.1 (kernel 5.14.0-570.60.1+27.2.el9_6_ciq).
  • With the default update configuration, mandatory updates are installed automatically on the nearest Sunday at 14:00, based on the time zone of the backup server.
  • If the update does not appear on the Updates tab, it may already be installed.
  • For details, see Veeam Backup & Replication User Guide: Viewing Update History.
  • Appliances that use a local mirror of the Veeam repository receive the update after the mirror is synchronized.
  • To install the update without waiting for automatic installation, perform the following steps: Log in to the Veeam Host Management console on the backup server.

Official advisory · high-confidence parse· fetched 17 hours ago·verify at source

Get an email when Veeam Backup & Replication publishes the next one.

See Veeam Backup & Replication's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Veeam Backup & Replication

More Veeam advisories

All Veeam advisories

iPhone and Android apps · New on the App Store

Monitor future Veeam CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Download on the App StoreGet CVE alerts on AndroidSee app features

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.