CVE-2022-26503

7.8 highEPSS 0.7%

High (7.8) in veeam veeam. EPSS 0.7% chance of exploitation in the next 30 days.

Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2022-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veeam:veeam

References

https://veeam.com
https://www.veeam.com/kb4289
https://veeam.com
https://www.veeam.com/kb4289

Check your stack JSON