Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,544All CVEsplus 19,172 rejected
- 357Last 24 hours4,846 in the last 7 days
- 16,731Last 30 days1,466 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 18 | 20 | 12 | 0 | 0 | 50 | 107 |
| 2025 | 4 | 4 | 1 | 0 | 0 | 9 | 57 |
| 2024 | 9 | 28 | 2 | 1 | 0 | 40 | 48 |
| 2023 | 2 | 0 | 2 | 0 | 0 | 4 | 8 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2020 | 2 | 2 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-107238 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management…Veeam · Management Pack for Microsoft System Center | High8.7 |
| CVE-2026-107239 | A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam…Veeam · Management Pack for Microsoft System Center | High8.8 |
| CVE-2023-22793 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of…Veeam · Management Pack for Microsoft System Center | Critical9.3 |
| CVE-2025-64394 | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365,…Veeam · Backup for Microsoft 365 | Medium4.3 |
| CVE-2026-108141 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write…Veeam · Backup and Replication | Medium5.9 |
| CVE-2026-106078 | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API…Veeam · Backup for Microsoft 365 | Medium6.9 |
| CVE-2026-107671 | A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA…Veeam · ONE | High8.5 |
| CVE-2026-108142 | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.Veeam · Backup and Replication | Critical9.1 |
| CVE-2026-106077 | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem…Veeam · Backup for Microsoft 365 | High8.3 |
| CVE-2026-106076 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365…Veeam · Backup for Microsoft 365 | Critical9.0 |
| CVE-2026-108140 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write…Veeam · Backup and Replication | Medium5.9 |
| CVE-2026-105477 | A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance…Veeam · Agent for Linux | High7.3 |
| CVE-2025-64391 | This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an…Veeam · Agent for Windows | Medium4.1 |
| CVE-2025-64392 | This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link.Veeam · Backup Enterprise Manager | Medium4.8 |
| CVE-2026-93026 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.Veeam · Backup and Replication | Medium6.1 |
| CVE-2026-58068 | This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system.Veeam · Agent for Windows | Medium6.8 |
| CVE-2026-58069 | This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.Veeam · Backup and Replication | High8.3 |
| CVE-2025-64393 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.Veeam · Backup and Replication | Critical9.4 |
| CVE-2026-64632 | A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.Veeam · ONE | High8.5 |
| CVE-2026-58070 | A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to…Veeam · Backup and Replication | Medium6.8 |
| CVE-2026-65641 | A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.Veeam · One | Critical9.3 |
| CVE-2026-58072 | A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.Veeam · Service Provider Console | Critical9.0 |
| CVE-2026-58074 | A vulnerability allowing a high-privileged user to execute arbitrary code on the server.Veeam · ONE | High8.6 |
| CVE-2026-64630 | A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.Veeam · ONE | Medium5.3 |
| CVE-2026-58073 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.Veeam · Service Provider Console | Critical9.5 |
| CVE-2026-64631 | A vulnerability allowing a low-privileged user to inject SQL and extract database contents.Veeam · ONE | High8.6 |
| CVE-2026-58075 | A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.Veeam · ONE | High8.7 |
| CVE-2026-64633 | A vulnerability allowing remote unauthenticated code execution on the agent host.Veeam · ONE | Critical10.0 |
| CVE-2026-64634 | A vulnerability allowing local privilege escalation to the Reporter service context.Veeam · ONE | High8.4 |
| CVE-2026-58071 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a…Veeam · Service Provider Console | High8.2 |
| CVE-2026-58067 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service.Veeam · Service Provider Console | High8.7 |
| CVE-2026-64635 | Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control…Veeam · Service Provider Console | Medium5.3 |
| CVE-2026-56844 | A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level…Veeam · Backup and Replication | High8.4 |
| CVE-2026-44963 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.Veeam · Backup and Replication | Critical9.4 |
| CVE-2026-32998 | This vulnerability in Veeam Service Provider Console allows for remote code execution.Veeam · Service Provider Console | Critical9.4 |
| CVE-2026-32997 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.Veeam · Backup and Replication | High8.6 |
| CVE-2026-32996 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.Veeam · Backup and Replication | High7.3 |
| CVE-2026-21709 | A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.Veeam · Backup and Replication | Medium6.7 |
| CVE-2026-21708 | A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.Veeam · Backup and Replication | Critical9.9 |
| CVE-2026-21672 | A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.Veeam · Backup and Replication | High8.8 |
| CVE-2026-21668 | A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.Veeam · Backup and Replication | High8.8 |
| CVE-2026-21669 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Veeam · Backup and Replication | Critical10.0 |
| CVE-2026-21671 | A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments…Veeam · Software Appliance | Critical9.1 |
| CVE-2026-21670 | A vulnerability allowing a low-privileged user to extract saved SSH credentials.Veeam · Backup and Replication | High7.7 |
| CVE-2026-21666 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Veeam · Backup and Replication | Critical10.0 |
| CVE-2026-21667 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Veeam · Backup and Replication | Critical10.0 |
| CVE-2025-59468 | This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.Veeam · Backup and Recovery | Critical9.0 |
| CVE-2025-55125 | This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.Veeam · Backup And Recovery | High7.8 |
| CVE-2025-59469 | This vulnerability allows a Backup or Tape Operator to write files as root.Veeam · Backup and Recovery | Critical9.0 |
| CVE-2025-59470 | This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.Veeam · Backup and Recovery | Critical9.0 |