Veeam Patches Critical Backup & Replication RCE Flaw CVE-2025-64393 and Two More Bugs
ID: 67b1d4b3-eb3a-524c-84b1-cd26f5ea4a5a
STIX ID: report--67b1d4b3-eb3a-524c-84b1-cd26f5ea4a5a
Feed Name: securityonline.info
Threat Score
Veeam released fixes for three vulnerabilities in Backup & Replication v12, including a critical RCE (CVE-2025-64393, CVSS 9.4) that allows a Backup Viewer role to trigger remote code execution via insecure deserialization; administrators should upgrade to build 12.3.2.4934 (12.3.2 P4) or v13 and audit Backup Viewer privileges. No confirmed exploitation or public proof-of-concept has been reported.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.