Skip to content
Critical Vulnerabilities in Veeam Backup & Replication Require Immediate Patching

Critical Vulnerabilities in Veeam Backup & Replication Require Immediate Patching

First seen 28 Oct 2026, 14:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 16:11 UTC
  • •Veeam released patches for five critical vulnerabilities on October 27, 2026.
  • •CVE-2026-108142 allows unauthenticated access to the CDP service, rated critical.
  • •Administrators must update to specific versions to protect against these vulnerabilities.

Veeam has released security updates addressing five vulnerabilities in Backup & Replication, Veeam Agent for Linux, and Veeam ONE, with the most severe being CVE-2026-108142, rated 9.1 critical. This vulnerability allows unauthenticated attackers to bypass authorization on the Continuous Data Protection (CDP) Coordinator Service. Other vulnerabilities include CVE-2026-105477, which allows local privilege escalation in Veeam Agent for Linux, and CVE-2026-107671, which enables MFA bypass for administrators. Administrators are urged to update to the latest versions to mitigate these risks, as ransomware gangs frequently target backup servers. The vulnerabilities were disclosed on October 27, 2026, and patches are available for immediate installation. No evidence currently suggests that these vulnerabilities are being in the wild.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-27
Veeam discloses five vulnerabilities
Veeam announced critical vulnerabilities in Backup & Replication and Veeam Agent for Linux, including CVE-2026-108142, rated 9.1.
Heise.De
2026-10-27
Patches released for vulnerabilities
Veeam released updates for Backup & Replication and Veeam Agent for Linux to address the vulnerabilities disclosed.
X
2026-10-27
CVE-2026-108141 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-107671 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-108140 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-108142 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-27
CVE-2026-105477 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (2)

Following this threat?

Track CVE-2026-105477 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 3

Common questions

Which versions of Veeam are affected?
Backup & Replication versions 13.0 and 13.1 are affected, while older 12.x releases are not.
What is the most critical vulnerability?
CVE-2026-108142 is the most critical, allowing unauthenticated access to the CDP Coordinator Service.
What should I do to protect my systems?
Immediately apply the latest patches for Backup & Replication and Veeam Agent for Linux to mitigate the vulnerabilities.