CVE-2022-26501Used in ransomware
Veeam Backup & Replication
Veeam Backup & Replication Remote Code Execution Vulnerability
What it is
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Veeam entries on the list
- Backup & Replication Veeam Backup and Replication Deserialization Vulnerability CVE-2024-40711 · Oct 17, 2024
- Backup & Replication Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability CVE-2023-27532 · Aug 22, 2023
- Backup & Replication Veeam Backup & Replication Remote Code Execution Vulnerability CVE-2022-26500 · Dec 13, 2022