Backup for Microsoft 365 vulnerabilities

2 known vulnerabilities in Backup for Microsoft 365 from Veeam. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  Backup for Microsoft 365: Incorrect Authorization

  CVE-2026-106077Oct 27, 2026Veeam

  A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

• 9.0 Critical severity

  Backup for Microsoft 365: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-106076Oct 27, 2026Veeam

  A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as th