{"metadata": {"vulnerability": "CVE-2026-21666", "count": 46, "kinds": {"milestone": 8, "sighting": 15, "kev": 5, "other": 18}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0096", "record": "NCSC-2026-0096", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-02T15:00:02.871Z", "date_only": false, "value": "2026-01-02T15:00:02.871Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-21666", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": true, "value": "2026-03-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0282", "record": "CERTFR-2026-AVI-0282", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-03-11T23:00:00Z", "date_only": false, "value": "2026-03-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0709", "record": "WID-SEC-W-2026-0709", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-11T23:00:00Z", "date_only": false, "value": "2026-03-11T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0709", "record": "WID-SEC-W-2026-0709", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-11T23:00:00Z", "date_only": false, "value": "2026-03-11T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0709", "record": "WID-SEC-W-2026-0709", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0282", "record": "CERTFR-2026-AVI-0282", "field": "last_revision_date"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0282", "record": "CERTFR-2026-AVI-0282", "field": "initial_release_date"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21666", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21666", "record": "FKIE_CVE-2026-21666", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0282", "record": "CERTFR-2026-AVI-0282", "field": "revisions.0.revision_date"}, {"timestamp": "2026-03-12T14:10:21.384Z", "date_only": false, "value": "2026-03-12T14:10:21.384828Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulc3hpkk2q", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "5cef0509-ef12-4bd9-9979-142690e66fda", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulc3hpkk2q"}, {"timestamp": "2026-03-12T14:54:08.200Z", "date_only": false, "value": "2026-03-12T14:54:08.200676Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0096", "record": "NCSC-2026-0096", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-12T14:54:08.200Z", "date_only": false, "value": "2026-03-12T14:54:08.200676Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0096", "record": "NCSC-2026-0096", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-12T14:54:08.200Z", "date_only": false, "value": "2026-03-12T14:54:08.200676Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0096", "record": "NCSC-2026-0096", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-12T15:09:39.180Z", "date_only": false, "value": "2026-03-12T15:09:39.180Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21666", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-12T15:09:39.180Z", "date_only": false, "value": "2026-03-12T15:09:39.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2026-21666", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-12T15:16:13Z", "date_only": false, "value": "2026-03-12T15:16:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GHCX-4Q37-GCRF", "record": "GHSA-GHCX-4Q37-GCRF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-12T15:16:13.007Z", "date_only": false, "value": "2026-03-12T15:16:13.007", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21666", "record": "FKIE_CVE-2026-21666", "field": "published"}, {"timestamp": "2026-03-12T15:30:25Z", "date_only": false, "value": "2026-03-12T15:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GHCX-4Q37-GCRF", "record": "GHSA-GHCX-4Q37-GCRF", "field": "published"}, {"timestamp": "2026-03-12T15:30:25Z", "date_only": false, "value": "2026-03-12T15:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GHCX-4Q37-GCRF", "record": "GHSA-GHCX-4Q37-GCRF", "field": "modified"}, {"timestamp": "2026-03-12T15:57:02.141Z", "date_only": false, "value": "2026-03-12T15:57:02.141892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mguratg65t24", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "0625f44e-745a-45b2-89e2-742c781e1c4b", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mguratg65t24"}, {"timestamp": "2026-03-12T15:57:05.396Z", "date_only": false, "value": "2026-03-12T15:57:05.396367Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mguraw2nct2n", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "e1a98ae3-5c5d-4e06-a21c-825e20faa824", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mguraw2nct2n"}, {"timestamp": "2026-03-12T23:00:00Z", "date_only": false, "value": "2026-03-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0709", "record": "WID-SEC-W-2026-0709", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-12T23:00:00Z", "date_only": false, "value": "2026-03-12T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0709", "record": "WID-SEC-W-2026-0709", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-13T03:15:00Z", "date_only": false, "value": "2026-03-13T03:15:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/03/veeam-patches-7-critical-backup.html", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "b18e511e-c151-4646-8246-aa857da3dd46", "url": "https://thehackernews.com/2026/03/veeam-patches-7-critical-backup.html"}, {"timestamp": "2026-03-13T03:55:43.772Z", "date_only": false, "value": "2026-03-13T03:55:43.772Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-21666", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-13T03:55:43.772Z", "date_only": false, "value": "2026-03-13T03:55:43.772Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21666", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-13T07:51:45.877Z", "date_only": false, "value": "2026-03-13T07:51:45.877+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0709", "record": "WID-SEC-W-2026-0709", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-13T10:26:51Z", "date_only": false, "value": "2026-03-13T10:26:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/veeam-sanate-vulnerabilita-in-backup-replication", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "6d6ccfdf-2279-4193-a1af-92dc0285e7cb", "url": "https://www.acn.gov.it/portale/w/veeam-sanate-vulnerabilita-in-backup-replication"}, {"timestamp": "2026-03-13T11:02:43.907Z", "date_only": false, "value": "2026-03-13T11:02:43.907812Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/08c1bcc5-abc2-4fd7-8a14-32dffe5c9afc", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "555641f1-5785-4717-90c3-6c855d617b3c", "url": "https://vulnerability.circl.lu/bundle/08c1bcc5-abc2-4fd7-8a14-32dffe5c9afc"}, {"timestamp": "2026-03-13T16:26:50Z", "date_only": false, "value": "2026-03-13T16:26:50+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-21666", "field": "timestamps.asserted_at", "uuid": "5ecbb7d5-c47b-49e2-94db-dbe6c3bfbd81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-13T16:26:50Z", "date_only": false, "value": "2026-03-13T16:26:50.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-21666", "field": "evidence.0.details.added_date", "uuid": "5ecbb7d5-c47b-49e2-94db-dbe6c3bfbd81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-13T16:26:50Z", "date_only": false, "value": "2026-03-13T16:26:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7993", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "97478656-cd21-4864-9837-51b118aba1a8", "content": "Veeam Software \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 RCE.\n\nVeeam Backup & Replication - \u044d\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0418\u0422-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043f\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0438 \u0441\u0431\u043e\u0435\u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0422\u0440\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2026-21666, CVE-2026-21667 \u0438 CVE-2026-21669) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u043c\u0435\u043d\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f CVE-2026-21708 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 Backup Viewer \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f postgres.\n\nVeeam \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f EoP \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Veeam Backup & Replication \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows, \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 SSH \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0447\u0435\u0440\u0435\u0437 HackerOne. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Veeam Backup & Replication 12.3.2.4465 \u0438 13.0.1.2067.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Veeam \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e VBR \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0441\u0440\u0435\u0434\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0441\u0440\u0435\u0434\u043d\u0438\u0445 \u0438 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439. \u0418 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d \u0441\u0440\u0435\u0434\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043b\u0443\u0436\u0438\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u0434\u043b\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u043a\u0440\u0430\u0436\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u043a\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0438.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0432 VBR \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Conti, BlackBasta \u0438 Cuba. \u0412 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Frag \u0443\u043c\u0435\u043b\u043e \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 RCE \u0432 VBR, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u00a0\u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Akira \u0438 Fog,\u00a0\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0437\u0436\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0418 \u043d\u0435 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u0435\u0439 Veeam \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 550 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 74% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Global 2000 \u0438 82% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 Fortune 500. \u0422\u0430\u043a \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043d\u043e\u0432\u043e\u0439 \u043f\u0430\u0440\u0442\u0438\u0435\u0439 CVE.", "url": "https://t.me/true_secator/7993"}, {"timestamp": "2026-03-13T16:26:50Z", "date_only": false, "value": "2026-03-13T16:26:50+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-21666", "field": "timestamps.first_seen_at", "uuid": "5ecbb7d5-c47b-49e2-94db-dbe6c3bfbd81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-13T16:26:50Z", "date_only": false, "value": "2026-03-13T16:26:50+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-21666", "field": "status.status_updated_at", "uuid": "5ecbb7d5-c47b-49e2-94db-dbe6c3bfbd81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-13T17:25:54Z", "date_only": false, "value": "2026-03-13T17:25:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-veeam-backup-replication-patch-immediately", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "5e49d13a-c9ff-44af-9d66-89c8bfc6ba30", "url": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-veeam-backup-replication-patch-immediately"}, {"timestamp": "2026-03-16T14:55:38Z", "date_only": false, "value": "2026-03-16T14:55:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3015", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "817ca762-a8d4-4929-9529-caaa2b861b69", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Veeam Backup & Replication \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-03174\nCVE-2026-21666\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN);\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.veeam.com/kb4830", "url": "https://t.me/bdufstecru/3015"}, {"timestamp": "2026-03-17T21:05:24.251Z", "date_only": false, "value": "2026-03-17T21:05:24.251617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mhbustnj6a22", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "b19127f2-60d8-4923-9633-08316ce24245", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mhbustnj6a22"}, {"timestamp": "2026-03-22T05:26:19.710Z", "date_only": false, "value": "2026-03-22T05:26:19.710435Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhmso4qd2c2x", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "cb27c0f9-50e4-48f6-9046-d39350a05df3", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhmso4qd2c2x"}, {"timestamp": "2026-03-22T09:07:20.566Z", "date_only": false, "value": "2026-03-22T09:07:20.566433Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhn6zffpes2x", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "daaaf78f-462a-4766-9c71-f5e1a64a9175", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhn6zffpes2x"}, {"timestamp": "2026-03-31T02:00:14.337Z", "date_only": false, "value": "2026-03-31T02:00:14.337174Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mid3dzgcsl2r", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "9b2942af-b830-47c3-bc0c-ba9853b1c3eb", "url": "https://bsky.app/profile/cyberhub.blog/post/3mid3dzgcsl2r"}, {"timestamp": "2026-06-17T10:18:53.353Z", "date_only": false, "value": "2026-06-17T10:18:53.353", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21666", "record": "FKIE_CVE-2026-21666", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-21666", "field": "timestamps.recorded_at", "uuid": "5ecbb7d5-c47b-49e2-94db-dbe6c3bfbd81", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:33.925Z", "date_only": false, "value": "2026-06-19T12:42:33.925511Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5ecbb7d5-c47b-49e2-94db-dbe6c3bfbd81", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "0d8412d7-772d-41c3-88fc-6a1e4f9cb5ee", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5ecbb7d5-c47b-49e2-94db-dbe6c3bfbd81"}, {"timestamp": "2026-06-19T12:45:38.402Z", "date_only": false, "value": "2026-06-19T12:45:38.402909Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aca3a71c-bf1a-44e9-af84-0d0490be11f9", "record": "CVE-2026-21666", "field": "creation_timestamp", "uuid": "453bb69b-dce8-47b3-a94a-3f79027fc534", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aca3a71c-bf1a-44e9-af84-0d0490be11f9"}]}