New Veeam Vulnerabilities Expose Backup Servers to RCE Attacks

Veeam issues patch to close critical remote code execution flaw

Veeam has released an update to fix a security flaw in its Backup & Replication software that could let certain users run code on affected systems. The main issue, tracked as CVE-2025-59470, affects all Veeam Backup & Replication version 13 builds, according to a security advisory released Tuesday. Veeam said older product lines, including 12.x and earlier, are not affected by the vulnerabilities listed. Veeam said the flaw could allow someone w…

New Veeam vulnerabilities expose backup servers to RCE attacks

Veeam released security updates to patch multiple security flaws in its Backup & Replication software, including a critical remote code execution (RCE) vulnerability.

Veeam Patches Critical RCE Flaw in Backup Software: Update to v13.0.1.1071

Veeam’s Fortress Under Siege: Unpacking the Latest Critical Flaw in Backup Security In the ever-evolving world of cybersecurity, where data backups serve as the last line of defense against ransomware and other digital threats, Veeam Software has once again found itself in the spotlight. The company, a leader in backup and recovery solutions, recently released a patch addressing multiple vulnerabilities in its flagship Backup & Replication softw…

Holes in Veeam Backup suite allow remote code execution, creation of malicious backup config files

The vendor has issued a patch to close four holes in its flagship Backup & Replication suite; version 13 users are advised to audit their backup config files and closely monitor backup jobs.

Veeam Resolves CVSS 9.0 RCE Flaw And Other Security Issues - Cybernoz - Cybersecurity News

Veeam resolves CVSS 9.0 RCE flaw and other security issues Pierluigi Paganini January 07, 2026 Veeam patched a critical RCE flaw in Backup & Replication, CVE-2025-59470, rated CVSS 9.0, along with other vulnerabilities. Veeam released patches for multiple Backup & Replication flaws, including a critical RCE vulnerability tracked as CVE-2025-59470 (CVSS score of 9.0). A Backup or Tape Operator can achieve remote code execution as …