CVE-2025-23121

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

CVE-2025-23121

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

How to Upgrade the NATS Server Used by Veeam Backup for Microsoft 365

Purpose This article provides information about upgrading the NATS Server used by Veeam Backup for Microsoft 365. NATS Server Version Impact It is recommended that customers use the latest supported version of NATS Server with Veeam Backup for Microsoft 365 to avoid any potential performance...

CVE-2025-24286

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...

CVE-2025-24286

CVE-2025-24286 affects Veeam Backup & Replication (12.x) where an authenticated user with the Backup Operator role can modify backup jobs, potentially enabling arbitrary code execution. The Red Hat/NC SC engagement notes and other sources corroborate this as a vulnerability in the backup server t...

CVE-2025-24286

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...

CVE-2025-23121

CVE-2025-23121 affects Veeam Backup & Replication (Backup Server) with remote code execution achievable by an authenticated domain user on domain-joined servers. Public details consistently cite version pre-12.3.2.3617 as vulnerable; remediation is to upgrade to 12.3.2.3617 or newer. Multiple sou...

CVE-2025-23121

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

CVE-2025-23121

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

Security Bulletin: IBM Backup, Recovery and Media Services for i is vulnerable to a user gaining elevated privileges due to an unqualified library call [CVE-2025-33108]

Summary IBM Backup, Recovery, and Media Services is vulnerable to allowing a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualified call. A malicious actor could cause user-controlled code to run with component access to the host operatin...

Vulnerabilities fixed in Veeam Backup

Veeam has fixed vulnerabilities in Veeam Backup & Replication 12.3.2.3617 and Veeam Agent for Microsoft Windows 6.3.2.1205. The vulnerabilities can be exploited after access to compromise backup servers. The highest rated vulnerability, CVE-2025-23121, allows an attacker with domain user privileg...

Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication

Veeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions. The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9.9 out of a maximum of 10.0. "A vulnerability...

Veeam Backup and Replication 12.x < 12.3.2.3617 Multiple Vulnerabilities (June 2025) (KB4743)

The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.3617. It is, therefore, affected by multiple vulnerabilities: - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user. CVE-2025-23121 - A...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication version 12.3.1.1139 and earlier, which originates from a backup job that can be modified by a user in the Backup Operator role, which could lead to the...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication version 12.3.1.1139 and prior versions that originates from allowing remote code execution by authenticated domain users...

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems stems from deficiencies in the input data validation mechanism. This allows attackers to execute arbitrary code on the backup server.

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems stems from deficiencies in the input data validation mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the backup server...

Backups Are Under Attack: How to Protect Your Backups

Ransomware has become a highly coordinated and pervasive threat, and traditional defenses are increasingly struggling to neutralize it. Today's ransomware attacks initially target your last line of defense — your backup infrastructure. Before locking up your production environment, cybercriminals...

PT-2025-25742

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions 12 through 12.3.2.3600 Description A flaw in the input validation mechanism allows an authenticated domain user to achieve remote code execution RCE on the backup server. This issue specifically impacts back...

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2

All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 12.3.2. Veeam Product Latest Version Download Page Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we...

WordPress Backup and Staging by WP Time Capsule plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Backup and Staging by WP Time Capsule plugin that stems from improper input neutralization and can be exploited by a...