How many Veeam Backup and Replication CVEs are in CISA KEV?

None of Veeam Backup and Replication's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Veeam Backup and Replication are affected?

15 distinct Veeam Backup and Replication versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Veeam Backup and Replication CVEs?

Veeam Backup and Replication's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-284 (Improper Access Control), CWE-693 (Protection Mechanism Failure), CWE-522 (Insufficiently Protected Credentials).

How many critical Veeam Backup and Replication vulnerabilities are there?

Veeam Backup and Replication has 6 critical and 10 high-severity CVEs.

What is the average severity of Veeam Backup and Replication CVEs?

The average CVSS base score across Veeam Backup and Replication's scored CVEs is 8.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Veeam

17 CVEs

Veeam Backup and Replication Vulnerabilities

Name: Veeam Backup and Replication vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Backup and Replication by Veeam.

17

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.8

Avg CVSS

2024–2026

Last updated July 22, 2026

Overview

Veeam Backup and Replication has 17 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Veeam Backup and Replication, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Veeam Backup and Replication's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High10

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Veeam Backup and Replication's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Veeam Backup and Replication CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Veeam Backup and Replication version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12 <= v < 12.3.23 CVEs
12.0 <= v <= 12.2.0.3343 CVEs
12.3.2 <= v < 12.3.23 CVEs
12.3.2 <= v <= 12.3.22 CVEs
13 <= v < 13.0.12 CVEs
13 <= v <= 13.0.12 CVEs
13.0.1 <= v < 13.0.12 CVEs
< 12.3.21 CVE
13.0.2 <= v < 13.0.21 CVE

Fixed in

12.3.26 CVEs
13.0.14 CVEs
> 12.2.0.3343 CVEs
> 12.3.22 CVEs
> 13.0.12 CVEs

Default status

All versions2 CVEs

Find a version

17 CVEs

Sort

High vulnerability · 2026-07-22
CVE-2026-56844CWE-22
High · CVSS 8.4
EPSS 0.1% (3th pct)2026-07-22
Critical vulnerability · 2026-06-09
CVE-2026-44963
Patch
CWE-502
Critical · CVSS 9.4
EPSS 2.4% (82th pct)2026-06-09
High vulnerability · 2026-05-28
CVE-2026-32997
Patch
CWE-36
High · CVSS 8.6
EPSS 0.5% (41th pct)2026-05-28
High vulnerability · 2026-05-28
CVE-2026-32996
Patch
CWE-532
High · CVSS 7.3
EPSS 0.2% (5th pct)2026-05-28
Medium vulnerability · 2026-04-17
CVE-2026-21709
Patch
CWE-77
Medium · CVSS 6.7
EPSS 0.2% (7th pct)2026-04-17
Critical vulnerability · 2026-03-12
CVE-2026-21708
Patch
CWE-89
Critical · CVSS 9.9
EPSS 1.1% (62th pct)2026-03-12
High vulnerability · 2026-03-12
CVE-2026-21672
Patch
CWE-538
High · CVSS 8.8
EPSS 0.2% (13th pct)2026-03-12
High vulnerability · 2026-03-12
CVE-2026-21668
Patch
CWE-693
High · CVSS 8.8
EPSS 0.5% (41th pct)2026-03-12
Critical vulnerability · 2026-03-12
CVE-2026-21669
Patch
CWE-693
Critical · CVSS 10.0
EPSS 1.2% (64th pct)2026-03-12
High vulnerability · 2026-03-12
CVE-2026-21670
Patch
CWE-522
High · CVSS 7.7
EPSS 0.4% (33th pct)2026-03-12
Critical vulnerability · 2026-03-12
CVE-2026-21666
Patch
CWE-284
Critical · CVSS 10.0
EPSS 1.1% (63th pct)2026-03-12
Critical vulnerability · 2026-03-12
CVE-2026-21667
Patch
CWE-284
Critical · CVSS 10.0
EPSS 1.1% (63th pct)2026-03-12
Critical vulnerability · 2025-10-30
CVE-2025-48983
Patch
CWE-284
Critical · CVSS 10.0
EPSS 0.8% (53th pct)2025-10-30
High vulnerability · 2025-10-30
CVE-2025-48984
Patch
CWE-94
High · CVSS 8.8
EPSS 1.0% (59th pct)2025-10-30
High vulnerability · 2024-12-04
CVE-2024-40717
Patch
CWE-306
High · CVSS 8.8
EPSS 0.7% (51th pct)2024-12-04
High vulnerability · 2024-12-04
CVE-2024-42456
Patch
CWE-306
High · CVSS 8.8
EPSS 0.4% (31th pct)2024-12-04
High vulnerability · 2024-12-04
CVE-2024-42455
Patch
CWE-306
High · CVSS 8.1
EPSS 15.1% (96th pct)2024-12-04

Common weakness types

The CWE weakness categories most often found in Veeam Backup and Replication CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Veeam Backup and Replication CVEs were published each year.

2024

3

2025

2

2026

12

Other Veeam products

Browse vulnerabilities for other products by Veeam.

veeam backup & replication42 CVEs Backup and Recovery14 CVEs one14 CVEs Backup & Replication13 CVEs service_provider_console9 CVEs backup_\&_replication6 CVEs Veeam Service Provider Console6 CVEs agent4 CVEs

All Veeam vulnerabilities

Frequently asked questions

Common questions about Veeam Backup and Replication vulnerabilities.

How many CVEs does Veeam Backup and Replication have?: Veeam Backup and Replication has 17 published CVE records since 2024.
How many Veeam Backup and Replication CVEs are in CISA KEV?: None of Veeam Backup and Replication's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Veeam Backup and Replication vulnerabilities?: No Veeam Backup and Replication CVEs currently have a tracked public exploit in this dataset.
Which versions of Veeam Backup and Replication are affected?: 15 distinct Veeam Backup and Replication versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Veeam Backup and Replication CVEs?: Veeam Backup and Replication's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-284 (Improper Access Control), CWE-693 (Protection Mechanism Failure), CWE-522 (Insufficiently Protected Credentials).
How many critical Veeam Backup and Replication vulnerabilities are there?: Veeam Backup and Replication has 6 critical and 10 high-severity CVEs.
What is the average severity of Veeam Backup and Replication CVEs?: The average CVSS base score across Veeam Backup and Replication's scored CVEs is 8.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Veeam Backup and Replication vulnerabilities

Monitor new Veeam Backup and Replication vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing