Vulnerabilitycritical

Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication

The Hacker Newsby @TheHackersNewsJun 18, 2025 · 05:49 UTC (Jun 18, 2025)1 min read2

Read at thehackernews.com

Analyze CVE-2025-23121 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-23121 CVE-2025-23120 CVE-2025-24286 CVE-2025-24287

Tags: cve-2025-23121 cve-2025-23120 cve-2025-24286 cve-2025-24287 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-23120	Domain-User RCE via Deserialization in Veeam Backup & Replication	8.8	24%	PoC	Mar 20, 2025
CVE-2025-23121 +1 related CVE CVE-2025-24286	Authenticated Domain-User RCE in Veeam Backup & Replication	8.8 group max	22%		Jun 19, 2025
CVE-2025-24287	A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions	6.1	<1%		Jun 19, 2025

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jun 18, 2025 Vulnerability / Data Protection Veeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions. The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9. 9 out of a maximum of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.