Highest advisory severityCritical 1 vendor · 3 advisories

CVE-2026-105477

CVE-2026-105477 is covered by the Veeam KB4948 security bulletin. Not in the CISA KEV catalog. Critical advisory severity. 3 advisories from Veeam.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Get an email when Veeam publishes the next one.

VulniPulse checks Veeam's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.

Start your free month

CVE-2026-105477 key facts

CISA KEV: Not listed (catalog checked Oct 30, 2026)
Highest advisory severity: Critical
Vendor advisories: 3 from Veeam
VulniPulse record: Published Aug 25, 2026 · Updated Oct 29, 2026

Is CVE-2026-105477 exploited?

No exploitation is reported in the sources VulniPulse tracks: CVE-2026-105477 is not in the CISA KEV catalog (checked Oct 30, 2026) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.

How do I fix CVE-2026-105477?

This CVE is tracked through a multi-CVE bulletin, so its fixed releases may differ from the bulletin-wide values below. Check the vendor source.

Vendor advisory comparison

Veeam

3 advisories

Advisory severityCritical9.1
Critical [CVE-2026-105477 +3] Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2
KB4948Source published Oct 27, 2026
This bulletin covers 4 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2 KB ID: 4948 Product: Published: 2026-10-27 Last Modified: Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program (VDP) for all Veeam products and perform extensive internal code audits. When a vulnerability is identified, our team promptly develops a patch to address and mitigate the risk. In line with our dedication to transparency, we publicly disclose the vulnerability and provide detailed mitigation information. This approach ensures that all potentially affected customers can quickly implement the necessary measures to safeguard their systems. It’s important to note that once a…
Related products — impact not confirmed
No product details extracted. Check the source bulletin.
Source-reported affected versions
13.1.1.18
13.1.2.57
13.0.3
13.0.3.63
2 more entries in the full advisory.
Source-reported fixed versions
13.1.2
13.1
Mitigation guidance
This vulnerability was fixed starting in the following builds:
Veeam Backup & Replication 13.1.2 (build 13.1.2.57) Veeam Backup & Replication 13.0.3 (build 13.0.3.63)
Full advisory and evidence Open source bulletin
Advisory severityUnrated
Advisory [CVE-2026-105477 +13] Release Information for Veeam Backup & Replication 13 and Updates
KB4738Source published Oct 27, 2026
This bulletin covers 14 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
Release Information for Veeam Backup & Replication 13 and Updates KB ID: 4738 Product: Published: 2025-09-03 Last Modified: 2026-10-29 13.1.2.57 This cumulative patch addresses issues, reports, and feedback received from customers, partners, service providers, and the community. The top-reported issues are listed below. Want to get rid of manual patching? Upgrade to the latest version and receive all future patches automatically through Veeam Updater. This patch becomes available through Veeam Updater as soon as the Veeam update repository is updated. It is then rolled out to Veeam Software Appliance 13.1 installations and, gradually, to all Windows-based Veeam Backup & Replication 13.1 deployments. To upgrade right away, download the 13.1 installation media now from My Account. Security…
Related products — impact not confirmed
No product details extracted. Check the source bulletin.
Source-reported affected versions
13.1.2.11
13.1.2.4
13.1.2.2270
13.1.1.18
Source-reported fixed versions
Veeam Software Appliance 13.1
Veeam Agent for Microsoft Windows 13.1.2.812
Veeam Agent for Linux 13.1.2.11
Veeam Agent for Mac 13.1.2.4
4 more entries in the full advisory.
Mitigation guidance
Release Information for Veeam Backup & Replication 13 and Updates KB ID: 4738 Product: Veeam Backup & Replication | 13 | 13.1 Published: 2025-09-03 Last Modified: 2026-10-29 Release Information 13.1.2.57 2026-10-27 This cumulative patch addresses issues, reports, and feedback received from customers, partners, service providers, and the community.
Upgrade to the latest version and receive all future patches automatically through Veeam Updater.
This patch becomes available through Veeam Updater as soon as the Veeam update repository is updated.
To upgrade right away, download the 13.1 installation media now from My Account.
4 more entries in the full advisory.
Full advisory and evidence Open source bulletin
Advisory severityUnrated
Advisory [CVE-2024-40709 +1] List of Security Fixes and Improvements in Veeam Agent for Linux
KB3109Source published Aug 25, 2026
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
List of Security Fixes and Improvements in Veeam Agent for Linux KB ID: 3109 Product: Published: 2020-03-02 Last Modified: 2026-10-26 Purpose 13.1.2.11 - OpenSSL upgraded to version 3.5.8 13.1.0.252 13.0.1.404 - The port range opened on the host firewall was changed to 2500-3300. 13.0.3.213 13.0.1.94 13.0.0.0.772 6.3.2.1307 6.2.0.101 - CVE-2024-40709 vulnerability was fixed. 6.1.0.1498 - OpenSSL library updated to 1.0.2zi. - LZ4 library updated to 1.9.4. - Updated zlib library to 1.2.13. - Stronger backup encryption. - (See pg. 7 of Veeam Backup & Replication 12.1 What's New PDF ) 6.0.2.1168 5.0.2.4707 - liblz4 was updated to v1.9.4. - zlib was updated to v1.2.13. - PuTTY was updated to 0.80. 5.0.0.4318 - Addressed an issue with insecure default permissions of files created in /tmp…
Related products — impact not confirmed
No product details extracted. Check the source bulletin.
Source-reported affected versions
Affected-version details not available in this record.
Source-reported fixed versions
No fixed-version detail extracted. This does not mean no fix exists.
Mitigation guidance
List of Security Fixes and Improvements in Veeam Agent for Linux KB ID: 3109 Product: Veeam Agent for Linux | 4.0 | 5.0 | 6.0 | 6.1 | 6.2 | 6.3 | 6.3.1 | 6.3.2 | 13 | 13.1 Published: 2020-03-02 Last Modified: 2026-10-26 Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Agent for Linux.
The goal of this article is to provide our customers' security and compliance teams with the detailed information on security improvements between releases, in order to help them make an informed decision on whether it is critical to upgrade from their current Veeam Agent for Linux version to a later one.
Full advisory and evidence Open source bulletin

All Veeam advisories

Follow CVE-2026-105477 in the free weekly digest

Every Monday: whether it was added to CISA KEV, reported exploited, got a fix or changed severity, plus the week's critical and high advisories.

Browse the latest tracked CVEs or the CVEs listed in CISA KEV.

Android app · Google Play

Monitor future Veeam CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features