Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-55125+3 related CVEs | This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file | 9.8 group max | <1% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jan 07, 2026 Vulnerability / Enterprise Security Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a "critical" issue that could result in remote code execution (RCE). The vulnerability, tracked as CVE-2025-59470, carries a CVSS score of 9. 0.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.