Veeam: Security updates for multiple backup and management products
Veeam has released security updates for multiple products, including Veeam Agent for Linux, Veeam Backup and Replication, Veeam Backup for Microsoft 365, and Veeam ONE, to address undisclosed vulnerabilities.
Triage facts
Revision 1- Applicability
- Veeam Agent for Linux (< 13.1.2), Veeam Backup and Replication (< 13.0.3, < 13.1.2) +2
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 4 public sources
- Freshness
- Revision 1Oct 28, 23:59 UTC
- Source quality
- A1Roughly even chance
On October 27, 2026, the Cyber Centre published an advisory regarding security vulnerabilities affecting several Veeam products. While specific vulnerability details are undisclosed, the manufacturer has released updates to mitigate these security risks. Administrators are encouraged to verify current versions and apply the patches listed in the official Veeam knowledge base articles.
Recommendation
- Inventory all environments for the affected Veeam products listed below.
- Upgrade Veeam Agent for Linux to version 13.1.2 or later.
- Upgrade Veeam Backup and Replication to version 13.1.2 or later (ensuring all versions prior to 13.0.3 and 13.1.2 are addressed).
- Upgrade Veeam Backup for Microsoft 365 to the latest version, ensuring migration past build 8.6.0.1102.
- Upgrade Veeam ONE to the version specified in KB4951 (post-13.1.0.7233).
- Monitor the Veeam Support Knowledge Base for further details as they are released.
Mitigations
Upgrade Veeam Agent for Linux to 13.1.2, Veeam Backup and Replication to 13.1.2, and apply available patches for Veeam Backup for Microsoft 365 and Veeam ONE.
Multiple vulnerabilities across Veeam suite