Badtech.org

Tracking cybersecurity.

News

Veeam fixes five flaws across Backup & Replication, Agent for Linux, and Veeam ONE

Adam Field

Source: Badtech.org
RadarNews

Veeam on October 27 disclosed fixes for five vulnerabilities in Veeam Backup & Replication, Veeam Agent for Linux, and Veeam ONE, according to heise online, Brandefense, and pwn.watch. The most severe, CVE-2026-108142, is an unauthenticated authorization-bypass issue in the CDP Coordinator Service of Veeam Backup & Replication 13, rated CVSS 9.1.

heise online, Brandefense, Kyocera Document Solutions Australia, and Feedly report that CVE-2026-108140 and CVE-2026-108141 are medium-severity path-traversal flaws. An authenticated user with the Restore Operator role who controls a backed-up NAS share can write attacker-controlled files to arbitrary paths on the backup server. HKCERT reports CVE-2026-105477 is a high-severity local-privilege-escalation flaw in Veeam Agent for Linux 13.1 installations managed by Backup & Replication. Brandefense and pwn.watch report CVE-2026-107671 is a high-severity Veeam ONE MFA-bypass flaw requiring valid Administrator credentials.

Reported fixed builds are Veeam Backup & Replication 13.1.2 build 13.1.2.57 or 13.0.3 build 13.0.3.63, Veeam Agent for Linux 13.1.2 build 13.1.2.11, and Veeam ONE 13.1 P1 build 13.1.0.7940. Reported affected Backup & Replication releases are 13.1.1.18 and earlier 13.1 builds, plus 13.0.2.29 and earlier 13.0 builds; cited Veeam notes say 12.x is not affected by the three Backup & Replication flaws. Available reporting says Veeam has not reported exploitation of the five newly disclosed vulnerabilities.

Sources

Read more

PHP schedules emergency security release for two critical vulnerabilities rated 9.2

The PHP security team has announced an emergency security release scheduled for October 21, 2026, at 14:00 UTC (10:00 AM Eastern), addressing two critical vulnerabilities, each rated CVSS 4.0 9.2. Technical details, affected PHP versions, and patched releases have not yet been disclosed. The PHP team warned that patches could be released ahead of schedule if vulnerability details become public or evidence of active exploitation emerges.

Source: Badtech.orgBy Adam Field

Active exploitation hits SonicWall SMA1000 vulnerability chain with unauthenticated RCE path

Active exploitation is targeting SonicWall SMA1000 appliances through CVE-2026-83548 and CVE-2026-83549, a pre-authentication SSRF flaw and a post-authentication OS command-injection flaw that can be chained to reach unauthenticated remote code execution. Affected models are SMA 6210, SMA 7210 and SMA 8200v on 12.4.3-03453 or earlier, or 12.5.0-02835 or earlier; fixed builds are 12.4.3-03526 and 12.5.0-02952 or later.

Source: Badtech.orgBy Adam Field

Search Badtech.org

Enter a title, topic, or keyword.