CVE-2021-27876: An issue was discovered in Veritas Backup Exec before 21.2.

Security readout for executives and security teams

CVE-2021-27876 affects Veritas Backup Exec before 21.2. A weakness in the agent authentication scheme can let an attacker gain unauthorized authenticated access and use Backup Exec protocol commands to reach files with System privileges. CISA lists it as known exploited, so exposed legacy installations should be treated as urgent. Organizations running Veritas Backup Exec versions before 21.2, especially where Backup Exec agents are reachable over a network, are the likely exposure group. The source bundle does not provide CPEs or a complete affected-version matrix. Prioritize remediation quickly because this is a backup-system vulnerability with known exploitation and potential System-level file access. Backup infrastructure often contains sensitive data and recovery authority, making compromise operationally serious. Mitigation focus: Upgrade Veritas Backup Exec to 21.2 or later per the Veritas advisory.; Review Veritas VTS21-001 for supported fixed versions and deployment-specific guidance.; Prioritize internet-reachable or broadly reachable Backup Exec agent systems..

Prepared

May 22, 2026, 05:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.