A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments o…

CVE-2026-21671 is a vulnerability in Veeam Backup & Replication that allows authenticated users with Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments. This represents a significant security risk as it enables privilege escalation and code execution within backup infrastructure. The vulnerability affects HA configurations specifically, which are commonly used in enterprise environments for redundancy and reliability. Given the critical nature of backup systems in organizational security and disaster recovery, this vulnerability poses substantial risks to data protection and system integrity.