www.veeam.com Veeam Updater Vulnerability Allows Privilege Escalation
Article Content
- •CVE-2026-56844 allows local privilege escalation in Veeam Backup & Replication.
- •The vulnerability affects Linux-based systems; Windows servers are not impacted.
- •An update to fix the issue was released on July 15, 2026.
A vulnerability in the Veeam Updater component (CVE-2026-56844) allows local users to escalate privileges and gain root access to the operating system. This high-risk flaw affects the Veeam Backup & Replication server on Linux-based systems, while Windows-based servers are not directly impacted. An update (version 12.3.0.65) was released on July 15, 2026, to address this issue. Users with automatic updates enabled will receive the patch automatically, while others need to install it manually. The vulnerability was reported through HackerOne, highlighting the importance of timely updates for system security. Administrators are advised to check their systems to ensure they are running the latest version of the updater component.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-56844 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…