Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-106077

Veeam Backup for Microsoft 365 Administrator Role Allows Arbitrary File Read on Backup Server

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Veeam
Products
Backup For Microsoft 365
CVE-2026-106076

SQL Injection in Veeam Backup for Microsoft 365 Enables Remote Code Execution

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account.

CVSS 4.0 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Veeam
Products
Backup For Microsoft 365
CVE-2026-106078

Unauthenticated REST API Authentication Bypass via Forged Federation Token

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Veeam
Products
Backup For Microsoft 365
CVE-2025-64394

Privilege Escalation in Veeam Backup for Microsoft 365 via Installation File Write

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Veeam
Products
Backup For Microsoft 365