CVE Watch—

CVE-2022-26500

Veeam Backup & Replication Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

5.8%

p93

KEV

SIM

13 de dez. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

5.8%EPSS · 30 dias5.8%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Veeam / Backup & Replication

Vulnerabilidade

Veeam Backup & Replication Remote Code Execution Vulnerability

Adicionado ao KEV

13 de dez. de 2022

Corrigir até

3 de jan. de 2023

Uso conhecido em ransomware

Sim

Descrição resumida

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.veeam.com/kb4288; https://nvd.nist.gov/vuln/detail/CVE-2022-26500

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2024-40711—

99.8%

KEV—80Veeam Backup and Replication Deserialization Vulnerability—CVE-2023-27532—

99.6%

KEV—80Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability—CVE-2022-26501—

90.8%

KEV—77Veeam Backup & Replication Remote Code Execution Vulnerability—