Skip to main content

Veeam Backup & Replication CVE-2026-56844

| EUVDEUVD-2026-47595 HIGH
Path Traversal (CWE-22)
2026-07-22 hackerone GHSA-72f6-c934-4fg9
Path Traversal Backup And Replication
8.4
CVSS 4.0 · Vendor: hackerone
Share

Severity by source

Vendor (hackerone) PRIMARY
8.4 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.7 MEDIUM

Local Updater flaw needs an existing privileged appliance account (AV:L, PR:H), no user interaction and low complexity, yielding root-level full CIA impact with no scope change.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (hackerone).

CVSS VectorVendor: hackerone

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 22, 2026 - 01:37 vuln.today
CVE Published
Jul 22, 2026 - 00:44 cve.org
HIGH 8.4

DescriptionCVE.org

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.

AnalysisAI

Local privilege escalation in the Veeam Updater component of the Veeam Software Appliance allows a high-privileged local user to reach root-level control of the underlying operating system via path traversal (CWE-22). The flaw affects Veeam Backup & Replication deployed as the hardened software appliance, carries a CVSS 4.0 base score of 8.4, and was reported through HackerOne. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain authenticated local access to appliance
Delivery
Invoke Veeam Updater with crafted traversal path
Exploit
Escape intended directory via CWE-22
Execution
Write or overwrite file as root
Impact
Gain root-level OS control
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires local, authenticated access to the Veeam Software Appliance with high privileges (CVSS PR:H) and interaction with the Veeam Updater component; the attacker must be able to supply or influence a file path processed by that updater so the path traversal (CWE-22) resolves outside its intended directory. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H, score 8.4 High) frames this as a local, low-complexity attack that nonetheless requires high existing privileges (PR:H) and no user interaction, yielding full confidentiality, integrity and availability impact on the vulnerable system with no scope change. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has already obtained an authenticated, privileged account on the Veeam Software Appliance (for example a compromised backup-operator or a malicious insider) invokes the Updater component with a maliciously crafted path containing traversal sequences. Because the Updater runs as root and fails to constrain the path, the attacker writes to or overwrites a sensitive OS location and gains root-level control of the appliance. …
Remediation Patch available per vendor advisory: apply the fix described in Veeam KB4879 (https://www.veeam.com/kb4879) to the Veeam Software Appliance; the exact fixed build number was not included in the provided data, so consult that KB to confirm the target version before deployment. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, conduct a complete inventory of Veeam Backup & Replication deployments to identify which systems use the hardened software appliance variant and which local users have elevated privileges. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Backup And Replication

View all
CVE-2026-44963 CRITICAL
9.4 Jun 09

Remote code execution in Veeam Backup & Replication enables an authenticated domain user to execute arbitrary code on th
CVE-2026-32997 HIGH
8.6 May 28

Arbitrary file write in Veeam Backup & Replication 13 (≤13.0.1) on Linux-based deployments allows an authenticated Backu
CVE-2026-21709 MEDIUM
6.7 Apr 17

Bypass of Windows Driver Signature Enforcement in Veeam Backup and Replication 12.x and Software Appliance 13.x allows l

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0
CVE-2022-37042 CRITICAL POC
9.8

Same technique Path Traversal

View all
CVE-2019-19781 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2018-20250 HIGH POC
7.8
CVE-2022-37042 CRITICAL POC
9.8
CVE-2025-64446 CRITICAL POC
9.8
CVE-2022-30333 HIGH POC
7.5

Share

CVE-2026-56844 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy