CVE-2026-56844CWE-22path-traversal

CVE-2026-56844

published July 22, 2026

CVSS

8.4

EPSS

Percentile

6.3

In the wild

Unconfirmed

What it is

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.

The record

Technical detail

CVSS: 8.4 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00172 · 6.3th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2026-07-22T05:16Z

References (1)

https://www.veeam.com/kb4879 · [email protected]

EPSS history

Timeline

22 JUL 00:44Z
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level…
cvelistv5