CVE-2025-64393: Veeam Backup And Replication

Critical severity, CVSS 9.4. EPSS: 0.4% chance of exploitation in the next 30 days.

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

Affected products

• Veeam Backup And Replication: from 12, before 12.3.2.4934 (fixed in 12.3.2.4934)

Published 2026-10-07. Last modified 2026-10-08.