CyberSec.Space Logo
返回 CVE 浏览器

CVE-2022-26500

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-03-17
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.

Affected Platforms (CPE)

📦
Veeam

Veeam Backup \& Replication

>= 10.0.0.4442 and < 10.0.1.4854>= 11.0.0.825 and < 11.0.1.1261= 9.5.0.1536= 9.5.4.2615= 10.0.1.4854= 11.0.1.1261

References & Advisories

🔗 https://veeam.com
🔗 https://www.veeam.com/kb4288
🔗 https://veeam.com
🔗 https://www.veeam.com/kb4288
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26500

相關資安分析文章

周度网络安全新闻：2026 年 7 月 27 日

本周重大安全周报聚焦于 Check Point SmartConsole CVE-2026-16232 验证绕过之在野利用、PAN-OS GlobalProtect 漏洞与 Qilin 勒索软件侵袭、俄罗斯 LAUNDRY BEAR 对 Zimbra 进行之国家级电子邮件间谍活动，以及 Windchill 与 FakeGit 恶意 Repositories 威胁趋势。

2026-07-27

全球网络威胁情报摘要：2026 年 7 月 22 日

本期摘要重点分析本地部署 Microsoft SharePoint 服务器正遭主动利用之 CVE-2026-50522 漏洞、Qilin 勒索软件利用 PAN-OS CVE-2026-0257 身份验证绕过入侵企业 VPN，以及 Cisco 安全设备与关键基础设施修补处置指南。

2026-07-22

相关漏洞威胁

CVE-2026-642878.2

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU f...

CVE-2026-657118.6

sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators to execute ...

CVE-2026-610947.2

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions tha...

CVE-2026-607476.2

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions tha...