Home / Vulnerability Intelligence / CVE-2026-21672

CVE-2026-21672 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 12, 2026

Veeam Backup & Replication - Privilege Escalation

Published: March 12, 2026Updated: March 12, 2026

Overview

Veeam Backup & Replication on Windows contains a local privilege escalation vulnerability, letting local attackers escalate privileges, exploit requires local access to the system.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 5.1%(Probability of exploitation in next 30 days)

Impact

Local attackers can escalate privileges, potentially gaining administrative control over the system.

Mitigation

Update to the latest version of Veeam Backup & Replication.

References

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 12, 2026

🟠 CVE-2026-21672 - High (8.8) A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21672/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-21672
Severity: High
CVSS Score: 8.8
Type: broken_access_control
Status: unconfirmed
EPSS: 5.1%
Social Posts: 1

CVSS Metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Score

5.1%Probability of exploitation in the next 30 days