CVE-2021-27876

Veritas Backup Exec Agent allows attackers to access local files via crafted data management protocol commands.

An unpatched file access vulnerability in Veritas Backup Exec Agent lets attackers read arbitrary files on the host, exposing sensitive data and enabling further compromise. DIB organizations must ensure all backup agents are patched and monitored, as this flaw was actively exploited in the wild and linked to ransomware campaigns.

Shame score — A known, actively exploited file access vulnerability in critical backup infrastructure that was left unpatched and linked to ransomware, demonstrating severe negligence.