File Write Vulnerability in Veeam Backup & Replication Server
CVE-2026-32997

8.6HIGH

Key Information:

Vendor

Veeam
Status
Backup And Replication
Vendor
CVE Published:
28 May 2026

What is CVE-2026-32997?

An authenticated user with the Backup Administrator role on Linux-based Veeam Backup & Replication servers can exploit a vulnerability to write arbitrary files. This flaw poses risks to data integrity and security, potentially leading to unauthorized data manipulation or system compromise. Proper user role management and regular security updates are crucial to mitigate this risk.

Affected Version(s)

Backup and Replication 13 <= 13.0.1

References

https://www.veeam.com/kb4852

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.