Arbitrary Code Execution Risk in Veeam Backup & Replication by Authenticated Users
CVE-2025-24286

Currently unrated

Key Information:

Vendor

Veeam
Status
Veeam Backup & Replication
Vendor
CVE Published:
19 June 2025

Badges

đź“° News Worthy

What is CVE-2025-24286?

This vulnerability allows an authenticated user with the Backup Operator role to alter backup jobs, potentially leading to arbitrary code execution. This poses serious security threats as attackers could exploit this flaw to execute malicious payloads within the system. Organizations using affected versions should prioritize patching and review their role assignments to mitigate risks.

News Articles

favicon imageGBHackers News

Veeam Vulnerabilities Expose Backup Servers to Remote Attacks

Veeam, a leading provider of data protection and backup solutions, disclosed three critical vulnerabilities affecting its widely deployed backup software.

1 day ago

References

https://www.veeam.com/kb4743

Timeline

  • Vulnerability published

  • đź“°

    First article discovered by GBHackers News

.
CVE-2025-24286 : Arbitrary Code Execution Risk in Veeam Backup & Replication by Authenticated Users