cyfenced.com →

[ CVE-2025-64393 · Published 7 Oct 2026 ]

Vulnerability in Veeam Backup and Replication

CVSS 9.4 EPSS <1%2 agency advisoriesFix available

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.4

[ Description ]Official description

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1278

    Multiple vulnerabilities in Veeam products Translated from French

    Multiple vulnerabilities have been discovered in Veeam products. They allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

    CVE-2025-64393CVE-2025-64392CVE-2026-93026
  • BSI CERT-BundWID-SEC-2026-3765

    Veeam Backup Enterprise Manager: Multiple vulnerabilities Translated from German

    CVE-2025-64393CVE-2026-93026CVE-2025-64392

[ References ]References