CVE-2025-64393: Critical Veeam Backup & Replication RCE Vulnerability

This report analyzes CVE-2025-64393, a critical remote code execution vulnerability in Veeam Backup & Replication (affecting version 12 builds up to 12.3.2.4854) caused by insecure deserialization in the Mount Service; attackers with an authenticated Backup Viewer role could achieve RCE on the backup server. Veeam fixed the issue in build 12.3.2.4934 (P4) and the report advises immediate upgrades, role auditing, segmentation of backup infrastructure, and behavioral detection in the absence of published IOCs or confirmed in-the-wild exploitation.