CVE-2022-26500
Veeam Backup & Replication Remote Code Execution Vulnerability
Veeam Backup \& Replication
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.
17. Mär 2022
Original bei Hersteller öffnenAusgewertete Quellen
- Herstellerhttps://veeam.com
- Herstellerhttps://www.veeam.com/kb4288
- CISAhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26500
- CISAVeeam Backup & Replication Remote Code Execution Vulnerability
- NVDCVE-2022-26500