HexBrain

Browse / CVEs / CVE-2022-26500

CVE-2022-26500· veeam / backup & replication· CWE-22

Veeam Backup & Replication Remote Code Execution Vulnerability

Exploited in the wild. Listed by CISA on 2022-12-13; known to be used by ransomware.

5.8%likelihood of exploitation, next 30 days
93%of all CVEs are less likely
Nonecheck to confirm it

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

Use this check only on systems you are authorised to test. Where the data comes from