Skip to content
NewA calmer, faster ZeroHour

Veeam issues patch to close critical remote code execution flaw

CyberScoopby @gregotto ()2 min read2
Analyze CVE-2025-59470 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-59470
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter
9.02%

From the original article

2 min read at cyberscoop.com

The vulnerability could let operator-level users run commands as database administrator. (Photo Illustration by Thomas Fuller/SOPA Images/LightRocket via Getty Images) Veeam has released an update to fix a security flaw in its Backup & Replication software that could let certain users run code on affected systems.

CyberScoop

By @gregotto · cyberscoop.com

Read the full article at CyberScoop

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.