A vulnerability in Veeam Backup & Replication that allows an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments.
An authenticated Backup Administrator could exploit this vulnerability to execute arbitrary code remotely on high availability Veeam Backup & Replication deployments. This could result in complete compromise of the backup infrastructure, including high impact to confidentiality, integrity, and availability of the system. Attackers could potentially access, modify, or delete backup data, or pivot to other systems in the environment.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
No patch information available in provided data.
Implement strict access controls to limit who can be assigned the Backup Administrator role. Monitor for suspicious activities from accounts with Backup Administrator privileges. Review access logs for unauthorized remote code execution attempts. Consider implementing network segmentation to limit access to HA deployments of Veeam Backup & Replication. Restrict network access to backup infrastructure and maintain strong credential management practices for privileged accounts.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Feedly found the first article mentioning CVE-2026-21671 . See article
NVD published the first details for CVE-2026-21671
A CVSS base score of 9.1 has been assigned.
CVE-2026-21671 - Exploits & Severity - Feedly
Veeam Backup & Replication Local Privilege Escalation
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
