Local Privilege Escalation Vulnerability in Veeam Backup & Replication by Veeam
CVE-2026-21672

8.8HIGH

Key Information:

Vendor

Veeam
Status
Backup And Recovery
Vendor
CVE Published:
12 March 2026

What is CVE-2026-21672?

This vulnerability in Veeam Backup & Replication for Windows systems allows attackers with local access to escalate their privileges, potentially compromising the integrity of the backup data and system operations. Users are advised to review the security advisories provided by Veeam for mitigation steps and to ensure that their installations are updated accordingly.

Affected Version(s)

Backup and Recovery 12.3.2

Backup and Recovery 13.0.1

References

https://www.veeam.com/kb4831
https://www.veeam.com/kb4830

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.