CVE-2026-56844

Severity: high (CVSS 8.4 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-22 · updated 2026-10-24
Weakness: CWE-22

Description

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.

Affected products

Veeam Backup & Replication: all versions

References

https://www.veeam.com/kb4879

Get alerted when CVE-2026-56844 or the next vulnerability affects your stack