High SEVERITY — Vulnerability

CVE-2026-21672 — A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

Platform
Veeam Backup & Replication
CVE Record
CVE-2026-21672
CVSS Score
8.8/10
Published
12 March 2026
Views
13
Primary source: Review the official advisory at nvd.nist.gov Go to Source

Summary

A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.

Assessment

  • CVE: CVE-2026-21672
  • CVSS base score: 8.8
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
  • Source: NVD record

References

Action

  • Verify affected systems against your inventory
  • Apply the vendor patch during a maintenance window
  • Restrict access at the network layer until patched

Veeam Backup & Replication — Related Advisories

VIEW ALL →