CVE-2026-21667 in Backup and Replication
Summary
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Responsible
hackerone
Reservation
01/02/2026
Disclosure
03/12/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 350670 | Veeam Backup and Replication access control | 284 | Not defined | Official fix | CVE-2026-21667 |