Security Alert (A26-10-62): Multiple Vulnerabilities in Veeam Products

Description:

Veeam has released a security advisory to address multiple vulnerabilities in Veeam products. For detailed information about the vulnerabilities, please refer to the corresponding security advisory at vendor's website.

Affected Systems:

• Veeam Agent for Linux 13.1.1.4 and all earlier version 13.1 builds
• Veeam Backup & Replication 13.1.1.18 and all earlier version 13.1 builds
• Veeam Backup & Replication 13.0.2.29 and all earlier version 13.0 builds

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, elevation of privilege, security restriction bypass or tampering on an affected system.

Recommendation:

Patches for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.veeam.com/kb4948
• https://www.hkcert.org/security-bulletin/veeam-products-multiple-vulnerabilities_20261028
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105477
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-108140 (to CVE-2026-108142)