Multiple vulnerabilities in Veeam Backup & Replication before 13.0.2.29 allow privilege…
Multiple vulnerabilities in Veeam Backup & Replication before 13.0.2.29 allow privilege escalation and data integrity compromise.
The French CERT (CERT-FR) has issued an advisory regarding multiple security vulnerabilities discovered in Veeam Backup & Replication versions prior to 13.0.2.29. These flaws enable attackers to achieve privilege escalation and compromise data integrity within affected backup infrastructure environments.
Veeam has released version 13.0.2.29 to address these issues, tracked as CVE-2026-32996 and CVE-2026-32997. Organizations using Veeam Backup & Replication should prioritize applying the vendor's patches, as backup infrastructure represents a critical attack surface — compromise of backup systems can facilitate ransomware attacks by allowing threat actors to delete or encrypt backup data, eliminating recovery options.
Given the strategic importance of backup solutions in enterprise environments and the potential for privilege escalation to enable broader network compromise, administrators should treat this as a priority patching event and verify the integrity of their backup infrastructure following remediation.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0652
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free