CVE-2023-27532: listed in the CISA KEV catalog

CVE-2023-27532 · CVSS 7.5 HIGH · EPSS 81% · KEV 2023-08-22

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

Is CVE-2023-27532 exploited?

• Listed in the CISA KEV catalog on 2023-08-22.
• Federal remediation due 2023-09-12.
• Past that date by 1135 days.
• Used in ransomware campaigns.
• EPSS puts exploitation in the next 30 days at 81%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

• Veeam Backup & Replication · Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227)

Is there a patch?

Patch information is not available in this record.

What PlainSec published about CVE-2023-27532

• SafePay’s 600-victim campaign spans credentials and vulnerabilities (2026-10-20)

Primary sources

• NVD record
• CISA KEV catalog

What this record does not say

• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-10-20.