https://patchfirst.co/vendor/veeam/New and newly exploited Veeam CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2023-22793/CVE-2023-22793Thu, 29 Oct 2026 00:00:00 GMTVeeam · Management Pack for Microsoft System Center. Not in CISA KEV. EPSS 0.5% (higher than 44.5% of CVEs). CVSS 9.3 CRITICAL. Priority 16.1 of 100.https://patchfirst.co/cve/CVE-2026-108142/CVE-2026-108142Tue, 27 Oct 2026 00:00:00 GMTVeeam · Backup and Replication. Not in CISA KEV. EPSS 0.4% (higher than 34.3% of CVEs). CVSS 9.1 CRITICAL. Priority 14.3 of 100.https://patchfirst.co/cve/CVE-2025-64393/CVE-2025-64393Wed, 07 Oct 2026 00:00:00 GMTVeeam · Backup and Replication. Not in CISA KEV. EPSS 5.2% (higher than 92.5% of CVEs). CVSS 9.4 CRITICAL. Priority 27.3 of 100.https://patchfirst.co/cve/CVE-2026-44963/CVE-2026-44963Tue, 09 Jun 2026 00:00:00 GMTVeeam · Backup and Replication. Not in CISA KEV. EPSS 2.4% (higher than 83.7% of CVEs). CVSS 9.4 CRITICAL. Public exploit code exists. Priority 69.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2026-32996/CVE-2026-32996Thu, 28 May 2026 00:00:00 GMTVeeam · Backup and Replication. Not in CISA KEV. EPSS 0.2% (higher than 5.9% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 58.7 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-42448/CVE-2024-42448Wed, 11 Dec 2024 00:00:00 GMTVeeam · Service Provider Console. Not in CISA KEV. EPSS 20.4% (higher than 97.5% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. Priority 76.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-40711/CVE-2024-40711#kevThu, 17 Oct 2024 00:00:00 GMTVeeam · Backup & Replication. In CISA KEV since 2024-10-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 90.4% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2023-27532/CVE-2023-27532#kevTue, 22 Aug 2023 00:00:00 GMTVeeam · Backup & Replication. In CISA KEV since 2023-08-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS 80.6% (higher than 99.62% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059.003 Windows Command Shell; T1087 Account Discovery; T1087.001 Local Account; T1486 Data Encrypted for Impact; T1555 Credentials from Password Stores. Named in 1 threat report. Priority 82.0 of 100.kevransomwarepublic-exploitT1133T1059.003T1087T1087.001T1486T1555https://patchfirst.co/cve/CVE-2022-26501/CVE-2022-26501#kevTue, 13 Dec 2022 00:00:00 GMTVeeam · Backup & Replication. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.7% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1036 Masquerading; T1048 Exfiltration Over Alternative Protocol. Priority 73.0 of 100.kevransomwareT1190T1059T1036T1048https://patchfirst.co/cve/CVE-2022-26500/CVE-2022-26500#kevTue, 13 Dec 2022 00:00:00 GMTVeeam · Backup & Replication. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.1% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts; T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1036 Masquerading; T1048 Exfiltration Over Alternative Protocol. Priority 72.8 of 100.kevransomwareT1078T1190T1059T1036T1048https://patchfirst.co/cve/CVE-2020-15419/CVE-2020-15419Tue, 28 Jul 2020 00:00:00 GMTVeeam · ONE. Not in CISA KEV. EPSS 59.8% (higher than 99.13% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.https://patchfirst.co/cve/CVE-2020-10915/CVE-2020-10915Wed, 22 Apr 2020 00:00:00 GMTVEEAM · One Agent. Not in CISA KEV. EPSS 86.6% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.8 of 100.public-exploit