French agency warns of several security flaws in Veeam Backup for Microsoft 365
France's CERT-FR issued an advisory on 29 October 2026 about several security flaws in Veeam Backup for Microsoft 365, a tool that backs up Microsoft 365 data. Some flaws could let an attacker run harmful code remotely or gain higher access rights. Users are told to get the fixes from Veeam's own security bulletin, kb4962, dated 28 October 2026; CERT-FR calls it the vendor bulletin, meaning the company's official security notice.
What does it mean?
If you use this backup software to keep copies of Microsoft 365 data, some of its security holes could let outsiders take control of it or reach your files. The fix comes from Veeam, so the update is what matters, not this warning.
Who is affected?
Organizations and IT administrators who run Veeam Backup for Microsoft 365 version 8.x.