- 133/2025
- Critical
Veeam has released a security update to fix multiple vulnerabilities across Veeam Backup & Replication systems and Veeam Agent for Microsoft Windows.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code and gain access to the affected system.
Sample of the addressed vulnerabilities:
Veeam Backup Arbitrary Code Execution Vulnerability (CVE-2025-23121):
- CVSS: 9.9
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Consequences: Gain Access
The affected products:
- Veeam Backup & Replication 12.3.1.1139 and all earlier versions 12 builds.
Vulnerabilities
- CVE-2025-23121
- CVE-2025-24286
- CVE-2025-24287
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.