CVE-2025-64393
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
Risk Assessment
A user with limited privileges can escalate to full control over the backup server, potentially compromising data integrity and confidentiality.
Recommendation
Upgrade Veeam Backup & Replication to a patched version. Limit the number of users with the Backup Viewer role and monitor server activity.
Other vulnerabilities in Veeam Backup & Replication
See all- CVE-2026-21672High
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
- CVE-2026-21671Critical
The vulnerability allows an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication.
- CVE-2024-40711CriticalActively exploited
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
- CVE-2023-27532HighActively exploited
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
- CVE-2022-26501CriticalActively exploited
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
- CVE-2022-26500HighActively exploited
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4, 10.x, and 11.x. A remote authenticated user can access internal API functions and upload and execute arbitrary code.
- CVE-2026-93026Medium
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.
- CVE-2026-58069High
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.
Original NVD description (English source)
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS