Veeam Backup & Replication privilege escalation flaw
A vulnerability in Veeam Backup & Replication versions before 12.3.0.65 allows an attacker to escalate privileges.
ANSSI-CERT-FR has issued an advisory regarding a privilege escalation vulnerability affecting Veeam Backup & Replication versions prior to 12.3.0.65. Exploitation of this flaw could allow an attacker to elevate their privileges on affected systems, potentially leading to further compromise of backup infrastructure.
Veeam has published a security bulletin (kb4879) detailing the issue and providing patches. Organizations using affected versions of Veeam Backup & Replication are advised to consult the vendor's bulletin and apply the recommended fixes promptly, given the critical role backup systems play in ransomware resilience and disaster recovery.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0878
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free