{"vulnerability": "CVE-2026-32996", "sightings": [{"uuid": "af3f20ba-d4da-46c2-90eb-26391c7fb2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4ktlmj2b", "content": "\ud83d\udd17 CVE : CVE-2026-32996, CVE-2026-32997", "creation_timestamp": "2026-05-27T14:35:14.916424Z"}, {"uuid": "2b9d90db-47e7-49e4-8b94-8fb86e705026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116655797945283788", "content": "Attention, elevated activities detected targeting Veeam Backup and Replication (CVE-2026-32996) https://vuldb.com/vuln/366563/cti", "creation_timestamp": "2026-05-29T03:43:34.554120Z"}, {"uuid": "4790d634-3d03-4a06-8342-8c08827f65ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxedmccfs2n", "content": "Veeam\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u5fa9\u65e7\u88fd\u54c1\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\nVeeam Software\u304c\u63d0\u4f9b\u3059\u308b\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u88fd\u54c1\u300cVeeam Backup & Replication\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nVeeam Software\u306f\u73fe\u5730\u6642\u95935\u670826\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-32996\u300d\u300cCVE-2026-32997\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cVeeam Backup & Replication 13.0.1.2067\u300d\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002", "creation_timestamp": "2026-06-23T12:05:28.635681Z"}, {"uuid": "e8809846-c391-4948-b42c-445cd193a89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-18T04:00:12.950002Z"}, {"uuid": "ee61cf7a-815c-4f10-a00a-dcba35a3d12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102771", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T17:00:04.803045Z"}, {"uuid": "e108efdf-3126-4d25-acc2-21a8e4045d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw2iwvsdrd2n", "content": "~Arcticwolf~\nPublic PoC enables local users to gain SYSTEM; patch Veeam immediately.\n-\nIOCs: CVE-2026-32996\n-\n#CVE-2026-32996 #ThreatIntel #Veeam", "creation_timestamp": "2026-09-21T20:02:11.820136Z"}, {"uuid": "2ae8ba12-0931-4af4-91bf-694d4a0362ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-513", "content": "", "creation_timestamp": "2026-09-21T20:15:02.692953Z"}, {"uuid": "93d6f833-1a7d-4faf-81de-28bf267bd3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw3pot6iq52y", "content": "A critical exploited Veeam Agent vulnerability (CVE-2026-32996) is under active attack. Public PoC exploit code has been disclosed. Update systems now.\n\n#Veeam #CVE202632996 #Cybersecurity #Vulnerability #Infosec", "creation_timestamp": "2026-09-22T07:35:37.100092Z"}, {"uuid": "6af166a4-0ef4-4421-adf1-4070d580dc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117314423748594898", "content": "Veeam Agent LPE PoC https://github.com/suce0155/CVE-2026-32996", "creation_timestamp": "2026-09-22T11:20:46.464250Z"}, {"uuid": "4248cf09-2236-4fad-8c5e-1dbdde24ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mw44bofp4n72", "content": "Veeam Agent LPE PoC https://github.com/suce0155/CVE-2026-32996", "creation_timestamp": "2026-09-22T11:20:57.407110Z"}, {"uuid": "9e13f136-9a76-4de3-984f-a010dc5cc0c8", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c9a57f0-6012-4178-909d-f5c8e33c4d16", "content": "", "creation_timestamp": "2026-09-22T21:00:32.810892Z"}, {"uuid": "3860f331-ede6-4357-a44a-8b1dde07a28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mw6kqsluct2y", "content": "CISA KEV: Zyxel GS1900 CVE-2026-7273 and Veeam Agent CVE-2026-32996 both under active exploitation. Patches available for both\u2026 https://0daynews.com/articles/2026-09-22-zyxel-veeam-kev-active-exploitation/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3277", "creation_timestamp": "2026-09-23T10:45:14.214771Z"}]}