UpHeron
All vulnerabilities

Servers and applications

CVE-2022-26504

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager (SCVMM) allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe

Severity
High 8.8
Published
17 Mar 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
10.0.1.4854, 11.0.1.1261
Sources
NVD

Affected software

SoftwareAffected versions
Veeam Backup & ReplicationServers and applications · cpe:a:veeam:veeam_backup_\&_replication
  • Version 11.0.1.1261-p20220302
  • Version 11.0.1.1261-p20211211
  • Version 11.0.1.1261-p20211123
  • Version 11.0.1.1261
All 12 release lines
  • Version 9.5.0.1536
  • Version 9.5.4.2615
  • From 10.0.0.4442 before 10.0.1.4854
  • Version 10.0.1.4854
  • Version 10.0.1.4854-p20201202
  • Version 10.0.1.4854-p20210609
  • Version 10.0.1.4854-p20220304
  • From 11.0.0.825 before 11.0.1.1261
  • Version 11.0.1.1261
  • Version 11.0.1.1261-p20211123
  • Version 11.0.1.1261-p20211211
  • Version 11.0.1.1261-p20220302

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-26504
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-26504