Veeam fixes vulnerabilities in its backup platform and Linux agent
INCIBE publishes fixes for Veeam Backup & Replication and managed Linux agents. Updating the recovery platform requires subsequent checks on jobs and an actual restore.
News summary
INCIBE’s advisory of 29 October covers Veeam Backup & Replication and Software Appliance: versions 13.1.1.18 and earlier in the 13.1 branch, and 13.0.2.29 and earlier in the 13.0 branch. The issues include CVE-2026-108142, which allows access restrictions in CDP Coordinator to be bypassed without authentication.
INCIBE identifies Backup & Replication 13.1.2.57 or 13.0.3.63, depending on the branch, and Agent for Linux 13.1.2.11 as the fixed versions. The stated scope for the Linux agent covers installations managed by Backup & Replication. For a business, protecting backup infrastructure is part of its recovery capability; it should not be treated as a secondary system with no one responsible for it.
Source: INCIBE — 29 October 2026
What to review in your business
Map servers, appliances and agents to their update branches. Keep a configuration backup and check compatibility before making changes to the system responsible for recovering your data.
After the change, check scheduled jobs and perform a sample restore. A healthy console status does not prove that the recovered application works.
Concepts mentioned in this article: Backup · Replication
At Seintec, we help you organise maintenance for your computers and servers, check versions and plan changes. Contact our team.
Contact Seintec