Veeam Security Update – 14 October 2025

The addressed vulnerabilities could allow the attacker to gain elevated privileges or execute arbitrary code and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Veeam Backup & Replication Remote Code Execution Vulnerability (CVE- 2025-48983):

• CVSS: 9.9
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Access

2. Veeam Agent for Microsoft Windows Local Privilege Escalation Vulnerability (CVE-2025-48982):

• CVSS: 7.3
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: Required
• Consequences: Gain Privilege

The affected products:

• Veeam Backup & Replication 12.3.2.3617 and all earlier versions 12 builds.
• Veeam Agent for Microsoft Windows 6.3.2.1205 and all earlier versions 6 builds.