Detections
Analytics

Veeam Software Appliance < 13.0.2.29 Arbitrary File Write (CVE-2026-32997)

high Nessus Plugin ID 320871

Synopsis

The Linux-based backup application installed on the remote host is affected by an arbitrary file write vulnerability.

Description

The version of Veeam Backup and Replication (Veeam Software Appliance) installed on the remote Linux host is prior to 13.0.2.29. It is, therefore, affected by a vulnerability that allows an authenticated user with the Backup Administrator role to write arbitrary files on the Linux-based Veeam Backup & Replication server.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade the Veeam Software Appliance to build 13.0.2.29 or later.

See Also

https://www.veeam.com/kb4852

Plugin Details

Severity: High

ID: 320871

File Name: veeam_backup_replication_appliance_cve-2026-32997.nasl

Version: 1.1

Type: Local

Agent: unix

Family: Misc.

Published: 6/12/2026

Updated: 6/12/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Medium

Base Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS Score Source: CVE-2026-32997

CVSS v3

Risk Factor: High

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:veeam:backup_and_replication

Required KB Items: installed_sw/Veeam Backup and Replication

Patch Publication Date: 5/28/2026

Vulnerability Publication Date: 5/28/2026

Reference Information

CVE: CVE-2026-32997

IAVA: 2026-A-0514