Veeam

Switzerland Commercial www.veeam.com ↗ Bug Bounty ↗
D
RISKY
37
Total CVEs
27
Crit / High
3
Medium
2%
Unpatched
0%
Patched
8.0
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
2%
Under Review
90%
Pending
7%
✓ 0 patched ✗ 2 unpatched ~ 76 under review ⏳ 6 pending score
▸ Intelligence by Audience
PoC Available
12 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"veeam" port:443
org:"Veeam" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-44963 0.61% exploitation probability
CVE-2026-64633 0.60% exploitation probability
CVE-2026-58072 0.47% exploitation probability
CVE-2026-58067 0.45% exploitation probability
CVE-2026-58069 0.37% exploitation probability
🎯 Bug Bounty Program: https://www.veeam.com/bug-bounty-program.html
Quick Facts for Reporting
Total CVEs tracked
37
Critical severity
8
Actively exploited (CISA)
0
Unpatched ratio
2%
Avg CVSS score
8.0
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access - The Hacker News
The Hacker News 2026-09-22
Veeam Backup & Replication Tool Vulnerability Enables Privilege Escalation Attacks - CyberSecurityNews
CyberSecurityNews 2026-05-28
Veeam Backup & Replication Flaw Exposes Guest OS Credentials in Cleartext Logs - CyberSecurityNews
CyberSecurityNews 2026-08-27
New Veeam vulnerabilities expose backup servers to RCE attacks - BleepingComputer
BleepingComputer 2026-01-07
Veeam Backup BinaryFormatter Flaw Enables Remote Code Execution - GBHackers News
GBHackers News 2026-07-06
Veeam issues patch to close critical remote code execution flaw - CyberScoop
CyberScoop 2026-01-07
▸ Recent CVEs showing 20 of 84
CVE IDSeverityPatchEPSSDate
CVE-2026-58068 ? N/A UNKNOWN / UNPATCHED 0.10% 2026-10-07
CVE-2026-93026 ? N/A UNKNOWN / UNPATCHED 0.30% 2026-10-07
CVE-2025-64392 PoC ? N/A UNKNOWN / UNPATCHED 0.34% 2026-10-07
CVE-2025-64391 ? N/A UNKNOWN / UNPATCHED 0.12% 2026-10-07
CVE-2025-64393 PoC ? N/A UNKNOWN / UNPATCHED 0.36% 2026-10-07
CVE-2026-58069 ? N/A UNKNOWN / UNPATCHED 0.37% 2026-10-07
CVE-2026-58067 PoC 7.5 HIGH PATCH UNDER REVIEW 0.45% 2026-08-04
CVE-2026-58072 PoC ? N/A PATCH UNDER REVIEW 0.47% 2026-08-04
CVE-2026-58071 ? N/A PATCH UNDER REVIEW 0.36% 2026-08-04
CVE-2026-58074 PoC ? N/A PATCH UNDER REVIEW 0.35% 2026-08-04
CVE-2026-58073 PoC ? N/A PATCH UNDER REVIEW 0.32% 2026-08-04
CVE-2026-64633 PoC 10.0 CRITICAL PATCH UNDER REVIEW 0.60% 2026-08-04
CVE-2026-58075 PoC ? N/A PATCH UNDER REVIEW 0.28% 2026-08-04
CVE-2026-64634 PoC ? N/A PATCH UNDER REVIEW 0.11% 2026-08-04
CVE-2026-64631 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.27% 2026-08-04
CVE-2026-64630 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.24% 2026-08-04
CVE-2026-64635 5.3 MEDIUM PATCH UNDER REVIEW 0.19% 2026-07-30
CVE-2026-56844 8.4 HIGH PATCH UNDER REVIEW 0.17% 2026-07-22
CVE-2026-44963 PoC 9.4 CRITICAL PATCH UNDER REVIEW 0.61% 2026-06-09
CVE-2026-32996 7.3 HIGH PATCH UNDER REVIEW 0.17% 2026-05-28
View all 84 CVEs for Veeam →
▸Intel
HQBaar, Switzerland
Founded2006
Employees5,000
CEOAnand Eswaran
CountrySwitzerland
LicenseCommercial
Bug BountyView Program ↗
Trust ScoreD — RISKY
Max CVSS10.0
Last Updated2026-08-03
▸Top Weaknesses
CWE-94
Code Injection
5 occurrences in Veeam CVEs (14% of total)
CWE-94 ⓘ
5
CWE-287
Improper Authentication
2 occurrences in Veeam CVEs (5% of total)
CWE-287 ⓘ
2
CWE-863
Incorrect Authorization
2 occurrences in Veeam CVEs (5% of total)
CWE-863 ⓘ
2
CWE-306
Missing Authentication
2 occurrences in Veeam CVEs (5% of total)
CWE-306 ⓘ
2
CWE-862
Unknown Weakness Type
2 occurrences in Veeam CVEs (5% of total)
CWE-862 ⓘ
2
CWE-918
Server-Side Request Forgery (SSRF)
2 occurrences in Veeam CVEs (5% of total)
CWE-918 ⓘ
2
CWE-269
Improper Privilege Management
2 occurrences in Veeam CVEs (5% of total)
CWE-269 ⓘ
2
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Unknown Weakness Type
2 occurrences in Veeam CVEs (5% of total)
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) ⓘ
2
▸Company Profile

Veeam is a Swiss-based software company specializing in backup, disaster recovery, and data management solutions for virtual, physical, and cloud environments. Its flagship product, Veeam Backup & Replication, is widely used for protecting VMware, Hyper-V, and cloud workloads, making it a critical vendor in enterprise data protection and cybersecurity resilience. The company's software is frequently targeted by ransomware and other cyber threats, underscoring its importance in the security landscape.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +60% worse
CVE count 2026 vs 2025:  5 → 8 CVEs
Patch Speed ⓘ Poor (>65% open)
2% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€680K
Est. GDPR High
€6.8M

Based on 8 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Veeam D valtersit.com