Veeam Intelligent Diagnostics updates

[RomanK]

Veeam Intelligent Diagnostics (VID) is a feature that automatically detects known issues in the configuration and performance of backup infrastructure.
This thread will be used for tracking VID signature updates.

Follow this link to get information on how to update VID signatures.

Veeam Intelligent Diagnostics packages are cumulative and include previously released packages.

Previous updates: Veeam Intelligent Diagnostics updates (archive)

[RomanK]

Download link: Signatures v1.8.165
Compatibility: Veeam ONE 13.0.1, Veeam ONE 13.0

Veeam Backup & Replication 13.0.1 P1 (13.0.1.1071) is available
The release addresses four vulnerabilities and numerous additional issues.

Veeam ONE 13.0.1 P1 (13.0.1.6168) is available
The release brings several new features and improvements.

[RomanK]

Download link: Signatures v1.8.175
Compatibility: Veeam ONE 13.0.1, Veeam ONE 13.0

Veeam Backup & Replication 13.0.1 P2 (13.0.1.2067) is available
The Veeam Backup & Replication 13.0.1 P2 addresses the following security vulnerabilities:

• CVE-2026-21669 - A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.</li>
• CVE-2026-21670 - A vulnerability allowing a low-privileged user to extract saved SSH credentials.</li>
• CVE-2026-21671 - A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication.</li>
• CVE-2026-21672 - A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.</li>
• CVE-2026-21708 - A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.</li>

Security vulnerability CVE-2026-21666 in Veeam Backup & Replication
Security vulnerability CVE-2026-21667 in Veeam Backup & Replication
Security vulnerability CVE-2026-21669 in Veeam Backup & Replication
These issues are caused by an authenticated domain user being able to perform remote code execution (RCE) on the Backup Server.

Security vulnerability CVE-2026-21671 in Veeam Backup & Replication
This issue is caused by an authenticated user with the Backup Administrator role being able to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication.

Security vulnerability CVE-2026-21708 in Veeam Backup & Replication
This issue is caused by a Backup Viewer being able to perform remote code execution (RCE) as the postgres user.

Security vulnerability CVE-2026-21668 in Veeam Backup & Replication
This issue is caused by an authenticated domain user being able to bypass restrictions and manipulate arbitrary files on a Backup Repository.

Security vulnerability CVE-2026-21670 in Veeam Backup & Replication
This issue is caused by a low-privileged user being able to extract saved SSH credentials.

Security vulnerability CVE-2026-21672 in Veeam Backup & Replication
This issue is caused by local privilege escalation being possible on Windows-based Veeam Backup & Replication servers.

Restore to Azure Disk fails with 'Invalid Azure access tier string received'
Restore to Azure Disk fails with 'Invalid Azure access tier string received'

Editing jobs fails with 'Error while Resolving SID. Error number 1332' after configuration backup restore
The issue is caused by the user which created this specific job not being present on the current server.

Configuration Backup fails with 'Unsupported PostgreSQL type: character varying(255)'
The configuration backup logic does not handle the varchar(255) column type used in the 'backup.model.trustedaddomainauthoritycertificates' table.

[RomanK]

Download link: Signatures v1.8.189
Compatibility: Veeam ONE 13.0.1, Veeam ONE 13.0

Guest processing fails with 'Failed to install via DeploymentSvc' for Nutanix and Proxmox VMs after upgrade to 13.0.1.2067
An in-guest processing component may be assigned an invalid port value, preventing it from initializing.

Remote console login fails with 'interaction_required' on Silent Login when connecting to VBR 13 on Linux
A race condition in the OAuth silent login flow prevents the required session cookie from being found during authorization.

Console auto-update fails with 'Some or all identity references could not be translated' on non-English locales after upgrade to 13.0.1.2067
During the auto-update process, Veeam looks up the group named 'Administrators' by its English name, which does not match the localized group name on non-English systems.

[RomanK]

Download link: Signatures v1.8.201
Compatibility: Veeam ONE 13.0.2, Veeam ONE 13.0.1, Veeam ONE 13.0

Veeam Backup & Replication 13.0.2 (13.0.2.29) is available
The release addresses two vulnerabilities and numerous additional issues.

Veeam Backup & Replication 12.3.2 P3 (12.3.2.4854) is available
The release addresses one vulnerability and numerous additional issues.

Veeam ONE 13.0.2 (13.0.2.6723) is available
The release brings several new features and improvements.

Security vulnerability CVE-2026-32996 in Veeam Backup & Replication
This issue is caused by Veeam Agent for Microsoft Windows allowing local privilege escalation.

Security vulnerability CVE-2026-32997 in Veeam Backup & Replication
CVE-2026-32997 is a vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on a Linux-based Veeam Backup & Replication server.

Security vulnerability CVE-2026-44963 in Veeam Backup & Replication
This issue is caused by the backup server allowing an authenticated domain user to execute code remotely.

Application Aware Processing fails with the error "Production checkpoints cannot be created ... Error code: '32770'"
The backup fails with the error "Production checkpoints cannot be created for '<VM>'. Error code: '32770'", and the Hyper-V Volume Shadow Copy Requestor service (vmicvss) fails to start.

SQL Server transaction log backup fails with the error "Failed to prepare guest for SQL Server transaction log backup. Details: Object reference not set to an instance of an object"
PowerShell Direct is not supported on Windows Server 2012 R2, which prevents the guest service from initializing and causes the backup to fail.

WMI query to ObjectRestorePointEx fails with the error "Error occured during fetching object ... Object reference not set to an instance of an object"
A defect in the Veeam Backup & Replication WMI data provider causes the ObjectRestorePointEx query to fail with a null-reference error while fetching objects.