Live › vulnerability › CVE-2021-27877
Go to dashboardVeritas Backup Exec Agent has an improper authentication flaw in its SHA authentication scheme. An attacker can gain unauthorized access to the agent on a backup host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Veritas Backup Exec Agent | vendor | – | – |
| veritas backup exec | vendor | < 21.2 | 21.2 |
Unknown from the sources.
Apply the vendor updates per Veritas instructions; CISA lists this as a known exploited vulnerability with required action to apply updates.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.
This page as .md · .json · in your agent: get_signal("CVE-2021-27877")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.