CVE Watch—

CVE-2022-26501

Veeam Backup & Replication Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

4.1%

p91

KEV

SIM

13 de dez. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

4.1%EPSS · 30 dias4.1%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Veeam / Backup & Replication

Vulnerabilidade

Veeam Backup & Replication Remote Code Execution Vulnerability

Adicionado ao KEV

13 de dez. de 2022

Corrigir até

3 de jan. de 2023

Uso conhecido em ransomware

Sim

Descrição resumida

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.veeam.com/kb4288; https://nvd.nist.gov/vuln/detail/CVE-2022-26501

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2024-40711—

99.8%

KEV—80Veeam Backup and Replication Deserialization Vulnerability—CVE-2023-27532—

99.6%

KEV—80Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability—CVE-2022-26500—

93.2%

KEV—78Veeam Backup & Replication Remote Code Execution Vulnerability—