Critical SEVERITY — Vulnerability

CVE-2026-21708 — A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.

A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.

Platform
Veeam Backup & Replication
CVE Record
CVE-2026-21708
CVSS Score
9.9/10
Published
12 March 2026
Views
4
Primary source: Review the official advisory at nvd.nist.gov Kaynağa Git

Özet

A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.

Değerlendirme

  • CVE: CVE-2026-21708
  • CVSS taban puanı: 9.9
  • Vektör: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
  • Kaynak: NVD kaydı

Referanslar

Aksiyon

  • Etkilenen sistemleri envanterden doğrulayın
  • Üretici yamasını bakım penceresinde uygulayın
  • Yama uygulanana kadar erişimi ağ katmanında kısıtlayın
veeam backup \& replication *

Veeam Backup & Replication — Related Advisories

VIEW ALL →