{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Veeam Backup ist eine Softwarelösung für Datensicherung, Wiederherstellung und Disaster Recovery",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Veeam Backup für Microsoft 365 ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Angriff auszulösen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Sonstiges\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4217 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4217.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4217 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4217"
    }, {
      "category" : "external",
      "summary" : "Release Information for Veeam Backup vom 2026-10-27",
      "url" : "https://www.veeam.com/kb4913"
    }, {
      "category" : "external",
      "summary" : "Release Information for Veeam Backup vom 2026-10-27",
      "url" : "https://www.veeam.com/kb4957"
    } ],
    "source_lang" : "en-US",
    "title" : "Veeam Backup für Microsoft 365: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-27T23:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-29T09:05:57.821+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.7.0"
        }
      },
      "id" : "WID-SEC-W-2026-4217",
      "initial_release_date" : "2026-10-27T23:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-27T23:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "for Microsoft <365 8.6 Patch 1 (build 8.6.0.5011)",
          "product" : {
            "name" : "Veeam Backup for Microsoft <365 8.6 Patch 1 (build 8.6.0.5011)",
            "product_id" : "T061944"
          }
        }, {
          "category" : "product_version",
          "name" : "for Microsoft 365 8.6 Patch 1 (build 8.6.0.5011)",
          "product" : {
            "name" : "Veeam Backup for Microsoft 365 8.6 Patch 1 (build 8.6.0.5011)",
            "product_id" : "T061944-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:veeam:backup:for_microsoft__365_8.6_patch_1_%2528build_8.6.0.5011%2529"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "for Microsoft 365 8.6 <build 8.6.0.1102",
          "product" : {
            "name" : "Veeam Backup for Microsoft 365 8.6 <build 8.6.0.1102",
            "product_id" : "T061945"
          }
        }, {
          "category" : "product_version",
          "name" : "for Microsoft 365 8.6 build 8.6.0.1102",
          "product" : {
            "name" : "Veeam Backup for Microsoft 365 8.6 build 8.6.0.1102",
            "product_id" : "T061945-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:veeam:backup:for_microsoft_365_8.6__build_8.6.0.1102"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Backup"
      } ],
      "category" : "vendor",
      "name" : "Veeam"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2025-64394",
    "product_status" : {
      "known_affected" : [ "T061944", "T061945" ]
    },
    "release_date" : "2026-10-27T23:00:00.000+00:00",
    "title" : "CVE-2025-64394"
  }, {
    "cve" : "CVE-2026-106076",
    "product_status" : {
      "known_affected" : [ "T061945" ]
    },
    "release_date" : "2026-10-27T23:00:00.000+00:00",
    "title" : "CVE-2026-106076"
  }, {
    "cve" : "CVE-2026-106077",
    "product_status" : {
      "known_affected" : [ "T061945" ]
    },
    "release_date" : "2026-10-27T23:00:00.000+00:00",
    "title" : "CVE-2026-106077"
  }, {
    "cve" : "CVE-2026-106078",
    "product_status" : {
      "known_affected" : [ "T061944" ]
    },
    "release_date" : "2026-10-27T23:00:00.000+00:00",
    "title" : "CVE-2026-106078"
  } ]
}