Security Advisory

CVE-2022-26500

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-17 20:56:44

Last updated 2025-10-21 23:15:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.

← Browse all CVEs View on cve.org ↗