Vendor

Veritas

As of , 3 Veritas vulnerabilities are on CISA's list of exploited vulnerabilities, 3 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2021-27877.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2021-27877Improper AuthenticationVeritas Backup Exec AgentPatch this weekRansomware use; Metasploit module; EPSS 0.650.65
2CVE-2021-27878Command ExecutionVeritas Backup Exec AgentPatch this weekRansomware use; Metasploit module0.24
3CVE-2021-27876File AccessVeritas Backup Exec AgentPatch this weekRansomware use; Metasploit module0.14

Added each year

1232023: 3320232024: nonenone20242025: nonenone20252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20233
2024none
2025none
2026none

Used in ransomware