{"affected":[{"defaultStatus":"unaffected","product":"Backup and Replication","source":"CNA: hackerone","vendor":"Veeam","versions":[{"lessThan":"13.0.3","status":"affected","version":"13.0","versionType":"semver"},{"lessThan":"13.1.2","status":"affected","version":"13.1","versionType":"semver"}]}],"cveId":"CVE-2026-108141","cwes":["CWE-22"],"description":"A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.","epss":{"date":"2026-11-04","percentile":0.29544,"score":0.00357},"exploits":[],"kev":null,"metrics":[{"score":5.9,"severity":"medium","source":"CNA: hackerone","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793814952625,"publishedAt":1793117818971,"references":[{"source":"CNA: hackerone","tags":[],"url":"https://www.veeam.com/kb4948"}],"remediation":[],"revision":"bbc5eef10965a4d36b296d1c738b1b5a248a889477f4ac96193e0d81be4f886b","sources":[{"modifiedAt":1793814952625,"name":"CNA: hackerone","retrievedAt":1793815721278,"url":"https://www.cve.org/CVERecord?id=CVE-2026-108141"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793815817122,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108141"}],"ssvc":{"assessedAt":1793814816630,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-108141","updatedAt":1793815817122}