A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.

CVE-2026-21666 is a vulnerability that allows authenticated domain users to perform remote code execution (RCE) on Veeam Backup Server systems. The vulnerability affects backup infrastructure and poses a high risk as it enables code execution with authenticated access. This could allow attackers to compromise backup systems and potentially access or manipulate backup data. The vulnerability has been assigned a high criticality rating and affects enterprise backup solutions.