Vulnerabilities Resolved in Veeam Backup & Replication 13.0.1.1071

All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 13.0.1.1071. Veeam Product Latest Version Download Page Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we...

How to Exclude Machines from Proactive Malware Scanning

Article Applicability This article is relevant only to Veeam Backup & Replication 13.0.x builds. Starting with Veeam Backup & Replication 13.1 the Proactive investigation feature can now be enabled or disabled for individual protected machines using the Veeam Backup & Replication Web UI. Purpose...

Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication

CVE-2023-27532 - Veeam Backup & Replication Vulnerability...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication that stems from a flaw in the Mount service that could lead to remote code execution...

CVE-2025-48983

CVE-2025-48983 affects Veeam Backup & Replication, specifically the Mount service, enabling remote code execution on Backup infrastructure hosts via an authenticated domain user. The vulnerability is documented across multiple feeds (NVD/NCSC/Red Hat/ENISA/CVE lists) with a high CVSS3.1 base scor...

SQL Plugin Job Fails with Error: "Mandatory arguments not set" or "Starting retention policy task"

Challenge After the upgrade or installation of the patch for Veeam Backup & Replication 12.3.2.4165, existing Veeam Plug-In for Microsoft SQL jobs fail with the following error: Failed to backup database. Error: Mandatory arguments not set Session failed: Mandatory arguments not set. Starting...

EUVD-2024-38582

Malicious code in bioql PyPI...

EUVD-2024-39889

Malicious code in bioql PyPI...

EUVD-2025-10303

Malicious code in bioql PyPI...

EUVD-2024-39396

Malicious code in bioql PyPI...

File-Level Recovery (FLR) in Veeam Kasten for Kubernetes

Purpose This article documents how to perform enterprise-grade protection and granular recovery of Kubernetes workloads using Veeam Kasten for Kubernetes integrated with Veeam Backup & Replication VBR. It provides step-by-step guidance on creating backup policies, exporting backups to VBR, and...

Support for AWS Elastic VMware Service (EVS) with Veeam Backup & Replication

Support Statement Veeam Backup & Replication fully supports AWS Elastic VMware Service EVS, treating it as a standard vSphere environment. Built on VMware Cloud Foundation VCF 5.2.x, EVS provides customers with comprehensive administrative access to vCenter, NSX, and other essential VMware...

Critical Veeam Backup & Replication CVE-2025-23121

On Tuesday, June 17, 2025, backup and recovery software provider Veeam published a security advisory for a critical remote code execution RCE vulnerability tracked as CVE-2025-23121. The vulnerability affects Backup & Replication systems that are domain joined. Veeam explicitly mentions that...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication version 12.3.1.1139 and earlier, which originates from a backup job that can be modified by a user in the Backup Operator role, which could lead to the...

Could not apply snapshot: Device has active dirty bitmaps

Challenge When the user attempts to use the Rollback function for a snapshot on a Proxmox Virtual Environment PVE Virtual Machine VM that is protected by Veeam Backup & Replication, the following error occurs: qemu-img: Could not apply snapshot '%%': Device has active dirty bitmaps Cause This err...

PT-2025-18778 · Undefined · Undefined

Multiple ransomware groups were spotted exploiting a vulnerability, tracked as CVE-2023-27532, in Veeam Backup & Replication. The vulnerability CVE-2023-275327 CVSS score of 7.5 impacts the Veeam Backup & Replication ... https://t.co/RPMhUoDv7P...

CVE-2025-32406

An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response...

Vulnerability Scanner Detection Related to CVE-2024-7264

Support Statement This Veeam KB article was created to address customers' concerns regarding the detection of the libcurl library by their security software on VMware Backup Proxies, where the VMware VDDK package is installed. Libcurl is a component of VMware VDDK Virtual Disk Development Kit,...