A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Veeam
  • Backup And Recovery

No data.

No data.

References
Link Providers
https://www.veeam.com/kb4830 cve-icon cve-icon
https://www.veeam.com/kb4831 cve-icon cve-icon
History

Sat, 18 Apr 2026 20:00:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation in Windows Veeam Backup & Replication

Sat, 18 Apr 2026 17:45:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation Vulnerability in Veeam Backup & Replication
Weaknesses CWE-284

Fri, 17 Apr 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Fri, 17 Apr 2026 15:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-538

Fri, 27 Mar 2026 20:30:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation Vulnerability in Veeam Backup & Replication
Weaknesses CWE-284

Fri, 27 Mar 2026 10:00:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation on Veeam Backup & Recovery
Weaknesses CWE-264
CWE-285

Fri, 27 Mar 2026 08:45:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation on Veeam Backup & Recovery
Weaknesses CWE-264
CWE-285

Thu, 26 Mar 2026 14:00:00 +0000

Type Values Removed Values Added
Title Veeam Backup & Replication Windows Local Privilege Escalation Vulnerability
Weaknesses CWE-284
CWE-732

Wed, 25 Mar 2026 22:00:00 +0000

Type Values Removed Values Added
Title Veeam Backup & Replication Windows Local Privilege Escalation Vulnerability
Weaknesses CWE-284
CWE-732

Wed, 25 Mar 2026 15:00:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation in Windows Veeam Backup & Replication
Weaknesses CWE-332
CWE-862

Wed, 25 Mar 2026 12:00:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation in Windows Veeam Backup & Replication
Weaknesses CWE-332
CWE-862

Tue, 24 Mar 2026 13:30:00 +0000

Type Values Removed Values Added
Title Local privilege escalation on Veeam Backup & Replication servers
Weaknesses CWE-269
CWE-284

Mon, 23 Mar 2026 12:15:00 +0000

Type Values Removed Values Added
Title Local privilege escalation on Veeam Backup & Replication servers
Weaknesses CWE-269
CWE-284

Mon, 23 Mar 2026 10:00:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation Vulnerability in Veeam Backup & Replication on Windows
Weaknesses CWE-269
CWE-280

Fri, 20 Mar 2026 16:00:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation Vulnerability in Veeam Backup & Replication on Windows
Weaknesses CWE-269
CWE-280

Fri, 13 Mar 2026 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Veeam
Veeam backup And Recovery
Vendors & Products Veeam
Veeam backup And Recovery

Thu, 12 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 12 Mar 2026 17:00:00 +0000

Type Values Removed Values Added
Description A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2026-03-12T16:26:52.213Z

Updated: 2026-04-17T15:32:11.662Z

Reserved: 2026-01-02T15:00:02.872Z

Link: CVE-2026-21672

cve-icon Vulnrichment

Updated: 2026-03-12T17:27:35.885Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-12T17:16:35.633

Modified: 2026-04-17T16:16:35.783

Link: CVE-2026-21672

cve-icon Redhat

No data.