DeutschShown in its original language — a full translation is planned for a future version.
Veeam Backup & Replication: Mehrere Schwachstellen
view advisory published 2026-01-05
Ein privilegierter Angreifer kann mehrere Schwachstellen in Veeam Backup & Replication ausnutzen um beliebige Dateien zu schreiben und Programmcode, im schlimmsten Fall mit Rootrechten, auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-59470US | — | Exploit | ||
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter. | ||||
| CVE-2025-59469US | — | — | ||
This vulnerability allows a Backup or Tape Operator to write files as root. | ||||
| CVE-2025-59468US | critical9.1 | — | ||
This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a
malicious password parameter. | ||||
| CVE-2025-55125US | critical9.8 | — | ||
This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious
backup configuration file. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan