← Database

CVE-2022-26500

HIGH CVSS: 8.8 Published: 2022-03-17 Modified: 2026-06-17

Description

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.

Affected Platforms

Veeam Veeam Backup \& Replication

Weakness Type

CWE-22, CWE-22

References