Veeam Cloud Connect (Product): news timeline & CVEs

Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code

Veeam fixed a critical Backup & Replication flaw letting Backup Viewer users run remote code.

Veeam patched CVE-2025-64393, a CVSS v4.0 9.4 flaw in Veeam Backup & Replication that lets an authenticated Backup Viewer execute remote code on the backup server through insecure deserialization in the Mount Service. It affects build 12.3.2.4854 and earlier version 12 builds; version 13 is not affected. The fix is 12.3.2 P4, build 12.3.2.4934, released October 6, 2026. The same update addresses Cloud Connect arbitrary file read (CVE-2026-58069, CVSS 8.3), Enterprise Manager reflected XSS (CVE-2025-64392), and master-key tampering (CVE-2026-93026). In-the-wild exploitation was not confirmed.

GBHackersupdated Oct 7, 15:14 UTC · 9d agofirst Oct 7, 10:30 UTC · 9d agoVulnerability 3 sources CVE-2025-64393 CVE-2026-58069 CVE-2025-64392+1 CVEs7· 2 reads

Veeam Backup and Replication Vulnerability Allow Attackers to Execute Malicious Script

Veeam Backup & Replication 12.3.2 P4 fixes four flaws, including critical RCE CVE-2025-64393.

Veeam released Backup & Replication 12.3.2 P4, build 12.3.2.4934, on October 6, 2026, fixing four vulnerabilities with CVSS 4.0 scores from 4.8 to 9.4. CVE-2025-64393, CVSS 9.4, lets a low-privileged Backup Viewer user achieve remote code execution on the backup server through insecure deserialization in the Mount Service, without user interaction. CVE-2025-64392 is reflected XSS in Enterprise Manager (CVSS 4.8); CVE-2026-93026 (CVSS 6.1) lets a Backup Viewer modify the master key and antivirus update credentials. CVE-2026-58069 (CVSS 8.3) allows an authenticated Cloud Connect tenant to read arbitrary files and also affects specified version 13 builds. Veeam does not report exploitation but warns unpatched systems could be targeted after patch analysis.

Cyber Security Newsupdated Oct 7, 15:14 UTC · 9d agofirst Oct 7, 08:10 UTC · 9d agoVulnerability 3 sources CVE-2025-64392 CVE-2025-64393

Veeam Cloud Connect

Timeline2 articles

Related CVEsby mentions

Appears with

Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code

Veeam Backup and Replication Vulnerability Allow Attackers to Execute Malicious Script