Veeam Agents Vulnerabilities & Security Advisories
2 advisories tracked · Veeam Knowledge Base — Security Advisories · 0 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Veeam advisory that VulniPulse classified as Agents, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: none classified yet.
Android app · Google Play
Monitor Veeam CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
Veeam Knowledge Base — Security Advisories
Polled via the official Veeam Support KB Atom feed, filtered to security advisories (KB articles mentioning CVEs or vulnerabilities). KB pages are fetched for new items to extract build numbers and fixes.
Latest Veeam Agents advisories
Advisory [CVE-2022-26503 +7] List of Security Fixes and Improvements in Veeam Agent for Microsoft Windows
List of Security Fixes and Improvements in Veeam Agent for Microsoft Windows KB ID: 3108 Product: Published: 2020-03-02 Last Modified: 2026-10-05 Purpose 13.1.0.544 - CVE-2025-64391 vulnerability was fixed. - MessagePack upgraded to version 2.5.302 - OpenSSL upgraded to version 3.5.7 13.0.4.1341 - SQLite upgraded to version 3.53.2 13.0.3.1220 - Microsoft. Kiota. Abstractions upgraded to version 1.22.0 13.0.1.120 13.0.0.835 - Communication protocol was switched to gRPC - System. IdentityModel. Tokens. Jwt upgraded to version 8.0.2 6.3.2.1302 6.3.2.1205 6.3.0.177 - Vulnerability ( CVE-2024-45207 ) in Veeam Agent for Microsoft Windows was fixed. 6.1.2.134 6.1.0.349 - OpenSSL library updated to 1.0.2zi. - LZ4 library updated to 1.9.4. - Stronger backup encryption. - (See pg. 7 of Veeam Backup & Replication 12.1 What's New PDF ) 6.0.2.1090 6.0.0.960 - Added support for networks with NTLM authentication disabled ( Kerberos-only authentication ). - Audit capabilities were improved. - zlib has been updated to version 1.2.13. 5.0.3.5029 - liblz4 was updated to v1.9.4. - zlib was updated to v1.2.13. - PuTTY was updated to 0.80. 5.0.3.4708 5.0.0.4301 4.0.2.2208 4.0.0.1811 - A custom security descriptor was provided for the driver's control device (vulnerability reported by Mile Karry).
Advisory [CVE-2024-40709] List of Security Fixes and Improvements in Veeam Agent for Linux
List of Security Fixes and Improvements in Veeam Agent for Linux KB ID: 3109 Product: Published: 2020-03-02 Last Modified: 2026-08-21 Purpose 13.1.0.252 - OpenSSL upgraded to version 3.5.7 13.0.1.404 - The port range opened on the host firewall was changed to 2500-3300. 13.0.3.213 13.0.1.94 13.0.0.0.772 6.3.2.1307 6.2.0.101 - CVE-2024-40709 vulnerability was fixed. 6.1.0.1498 - OpenSSL library updated to 1.0.2zi. - LZ4 library updated to 1.9.4. - Updated zlib library to 1.2.13. - Stronger backup encryption. - (See pg. 7 of Veeam Backup & Replication 12.1 What's New PDF ) 6.0.2.1168 5.0.2.4707 - liblz4 was updated to v1.9.4. - zlib was updated to v1.2.13. - PuTTY was updated to 0.80. 5.0.0.4318 - Addressed an issue with insecure default permissions of files created in /tmp 4.0.1.2365 - Sensitive information used by managed Linux agent may get logged in the Linux operating system logs. - Creating an SMB repository using CLI command causes plain text password to be logged in the Veeam debug log. 4.0.0.1961 - An issue of insecure file permissions was addressed (vulnerability reported by RACK911 Labs). - OpenSSL was updated to version 1.0.2t. As we're establishing this new process, we appreciate any feedback on the content or format of this KB article. Please let us know in the corresponding topic on the Veeam Community Forums.