Vulnerabilitycritical

Veeam resolves CVSS 9.0 RCE flaw and other security issues

Security Affairsby @securityaffairsJan 7, 2026 · 11:31 UTC (Jan 7, 2026)1 min read1

Read at securityaffairs.com

Analyze CVE-2025-59470 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-59470 CVE-2025-23120

Tags: cve-2025-59470 cve-2025-23120 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-23120	Domain-User RCE via Deserialization in Veeam Backup & Replication	8.8	24%	PoC	Mar 20, 2025
CVE-2025-59470	This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter	9.0	2%		Jan 8, 2026

From the original article

1 min read at securityaffairs.com

Veeam patched a critical RCE flaw in Backup & Replication, CVE-2025-59470, rated CVSS 9. 0, along with other vulnerabilities. Veeam released patches for multiple Backup & Replication flaws, including a critical RCE vulnerability tracked as CVE-2025-59470 (CVSS score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.