TL;DR Veeam released urgent updates to fix a critical Linux kernel bug in Veeam Software Appliance and related backup tools. Tracked as CVE-2026-98432 (CVSS 9.8), the flaw can cause a system crash or memory errors. Admins must install the kernel update via Veeam Updater or run the private fix right away. Why It Matters Veeam Software Appliance and Veeam Backup & Replication guard company data across virtual and cloud hosts.

TL;DR Veeam has fixed seven Veeam vulnerabilities across two products this week, including two rated Critical. The worst, CVE-2023-22793, scores 9.3 on CVSS v4. It allows unauthenticated remote code execution in Veeam Management Pack for Microsoft System Center. Meanwhile, Veeam Backup for Microsoft 365 receives four fixes, led by a 9.0 SQL injection bug. Upgrade Veeam Backup for Microsoft 365 to 8.6 Patch 1 and Management Pack to 13.1.

TL;DR Veeam has fixed seven Veeam vulnerabilities across two products this week, including two rated Critical. The worst, CVE-2023-22793, scores 9.3 on CVSS v4. It allows unauthenticated remote code execution in Veeam Management Pack for Microsoft System Center. Meanwhile, Veeam Backup for Microsoft 365 receives four fixes, led by a 9.0 SQL injection bug. Upgrade Veeam Backup for Microsoft 365 to 8.6 Patch 1 and Management Pack to 13.1.

TL;DR Veeam published two security advisories on October 27, 2026, resolving five Veeam vulnerabilities across its enterprise backup and monitoring software. The most severe flaw, CVE-2026-108142 (CVSS v4.0: 9.1), allows unauthenticated attackers to bypass authorization on the CDP Coordinator Service. System administrators must apply the latest software updates immediately to protect their backup infrastructure. Why It Matters Veeam Data Platform solutions protect data across more than 550,000 organizations worldwide.

TL;DR Veeam has fixed three flaws in Backup & Replication version 12, led by CVE-2025-64393. This critical Veeam Backup vulnerability scores 9.4 on CVSS 4.0 and lets a low-privileged user run code on the backup server. The fixes ship in build 12.3.2.4934, known as 12.3.2 P4. Why It Matters Backup servers hold the copies that companies need to recover from ransomware.

TL;DR Acronis fixed a high-severity Acronis cPanel plugin vulnerability in its Backup plugin for cPanel and WHM. Attackers are already exploiting it in the wild. All users should update to a fixed build right away. Why this Acronis cPanel plugin vulnerability matters The plugin backs up cPanel hosting servers for cloud and hosting providers. It handles accounts, files, databases, and mailboxes.

Affects users regardless of when their backups were created

Most organizations believe backups and DR plans make them resilient, but ransomware actors routinely target and compromise backup systems so recovery often fails when it matters most. True resilience requires immutable, isolated backups, integrated security and recovery automation, and routine testing to ensure fast, reliable restoration under attack conditions. #Acronis #ActiveDirectory

Veeam Backup vulnerability (CVE-2025-23114) allows attackers to execute arbitrary code and gain root access via a MitM attack. Learn how to..