Remote Code Execution Vulnerability in Veeam Backup & Replication
CVE-2025-48983

10CRITICAL

Key Information:

Vendor

Veeam
Status
Backup And Replication
Vendor
CVE Published:
30 October 2025

Badges

📰 News Worthy

What is CVE-2025-48983?

A vulnerability exists in the Mount service of Veeam Backup & Replication that allows an authenticated domain user to exploit the system, leading to potential remote code execution on the backup infrastructure hosts. This vulnerability underscores the significance of maintaining robust security measures and timely software updates to protect against unauthorized access and potential threats.

Affected Version(s)

Backup and Replication 12.3.2

News Articles

favicon imageCyber Press

Critical Veeam Backup Flaws Allow Remote Code Execution

Veeam has released Patch 12.3.2.4165 for Backup & Replication, resolving three significant security flaws that could expose organizations.

favicon imageGBHackers News

Critical Veeam Backup RCE Flaws Allow Remote Execution of Malicious Code

Veeam has released an urgent security patch to address multiple critical remote code execution (RCE) vulnerabilities in Veeam Backup & Replication version 12.

References

https://www.veeam.com/kb4771

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • 📰

    First article discovered by GBHackers News

  • Vulnerability Reserved

JSON
.
CVE-2025-48983 : Remote Code Execution Vulnerability in Veeam Backup & Replication