Vulnerability Details CVE-2026-21708
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 80.3%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-21708
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.0.0.1402
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.0.0.1420
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.1.0.2131
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.1.1.56
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.1.2.172
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.2.0.334
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.3.0.310
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.3.1.1139
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.3.2.3617
-
cpe:2.3:a:veeam:veeam_backup_&_replication:12.3.2.4165