{"id":"CVE-2026-108141","published":"2026-10-27T17:16:57.433","lastModified":"2026-10-27T17:16:57.433","description":"A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://www.veeam.com/kb4948","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}