cyfenced.com →

[ CVE-2025-64392 · Published 7 Oct 2026 ]

Vulnerability in Veeam Backup Enterprise Manager

CVSS 4.8 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1278

    Multiple vulnerabilities in Veeam products Translated from French

    Multiple vulnerabilities have been discovered in Veeam products. They allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

    CVE-2025-64393CVE-2025-64392CVE-2026-93026
  • BSI CERT-BundWID-SEC-2026-3765

    Veeam Backup Enterprise Manager: Multiple vulnerabilities Translated from German

    CVE-2025-64393CVE-2026-93026CVE-2025-64392

[ References ]References