critical9.8Known exploited
CVE-2022-26501
Veeam Backup & Replication Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-12-13. Federal due date: 2023-01-03.
Apply updates per vendor instructions.
Impact
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veeam | Veeam Backup \& Replication | from 10.0.0.4442 before 10.0.1.4854 from 11.0.0.825 before 11.0.1.1261 Versions 10.0.1.4854, 11.0.1.1261 |