Veeam Backup & Replication Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Veeam Backup & Replication version 13.0.1.1071 and earlier. This vulnerability allows an authenticated domain user to execute arbitrary code on the Backup Server. It was discovered during internal testing and is present in Windows-based deployments of Veeam Backup & Replication.

Impact

Exploitation of this vulnerability allows for remote code execution on the Backup Server.

Remediation

This vulnerability has been fixed in Veeam Backup & Replication version 13.0.1.2067.

Added: Mar 12, 2026, 3:22 PM
Updated: Mar 12, 2026, 3:22 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
3.1
remediation
7.7
relevance
3.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.