CVE-2026-56844
Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in Veeam Software Appliance

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: HackerOne

Description
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-22
Last Modified
2026-07-22
Generated
2026-08-11
AI Q&A
2026-07-22
EPSS Evaluated
2026-08-10
NVD
CVE-2026-56844
EUVD
EUVD-2026-47595

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
veeam updater 12.3.0.65
veeam software_appliance *
veeam infrastructure_appliance *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Veeam Updater component of Veeam Software Appliance and Veeam Infrastructure Appliance. It allows a local user to escalate privileges and gain root-level access to the underlying Linux operating system. The flaw has a CVSS score of 8.4, indicating high severity.

Detection Guidance

Check the Veeam Updater component version in the appliance's Host Management Console under Logs and Services. The version should be 12.3.0.65 or higher. If the appliance cannot access updates, manual verification is needed.

Impact Analysis

If exploited, an attacker with local access could gain full control over the system, potentially compromising data, installing malware, or disrupting services. The impact is limited to Linux-based Veeam appliances; Windows-based Veeam Backup & Replication servers are unaffected.

Compliance Impact

This vulnerability allows local privilege escalation to root access on Linux-based Veeam appliances, potentially enabling unauthorized access to sensitive data. Such access could violate GDPR's data protection requirements and HIPAA's security controls, as unauthorized root access may lead to data breaches or unauthorized modifications of protected health information.

Mitigation Strategies

Apply the Veeam Updater component version 12.3.0.65 or higher. If automatic updates are not possible, configure internet access to the update server or contact Veeam Support for manual intervention. Ensure patches are applied promptly to prevent exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56844. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart