Veeam: Backup servers can be tampered with, MFA disabled
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Security researchers disclosed several vulnerabilities in Veeam Backup & Replication and related products, including a critical flaw (CVE-2026-108142) that lets unauthenticated attackers reach the Continuous Data Protection service on backup servers. Veeam Agent for Linux and Veeam ONE are also affected, with patches available.