Reported by 7 outlets
Veeam Backup vulnerability CVE-2025-64393 allows low-privileged RCE
Why this score
- Breadth
- 2.00 / 2.0 · 7 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 4.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.28 / 0.6 · time to second source
- Recency
- × 0.04 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.3 / 10 = base × recency + community
Desk analysis
Veeam patched four vulnerabilities in Backup & Replication, with CVE-2025-64393 (CVSS 9.4) allowing low-privileged users to execute remote code on backup servers. The fix is in version 12.3.2 P4 (build 12.3.2.4934), released October 6, 2026. The advisory also notes affected prior builds: 12.3.2.4854, 13.03, and 13.1. Organizations running Veeam should apply the update immediately, as RCE on backup infrastructure carries high operational risk.
Timeline
-
original reporting
Critical Veeam Backup vulnerability CVE-2025-64393 (CVSS 9.4) enables RCE by low-privileged users. Update to 12.3.2 P4 now. # Veeam # VeeamB
securityonline.info · 7d ago · October 6th, 2026
Critical Veeam Backup vulnerability CVE-2025-64393 (CVSS 9.4) enables RCE by low-privileged users. Update to 12.3.2 P4 now. # Veeam # VeeamB
via Mastodon https://securityonline.info/veeam-backup-vulnerability-cve-2025-64393/?utm_source=mastodon&utm_medium=jetpack_social
-
update from veeam.com
KB4934: Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4
veeam.com · 8d ago · October 6th, 2026
Veeam published KB4934 on October 6, 2026, resolving CVE-2025-64393 in Backup & Replication 12.3.2 P4 (build 12.3.2.4934). The advisory states the vulnerability allows low-privileged users to execute remote code on backup servers and assigns a CVSS v4.0 score of 9.4. It affects build 12.3.2.4854 and was resolved with the P4 update.
-
update from gbhackers.com
Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code
gbhackers.com · 6d ago · October 7th, 2026
Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers. The vulnerability affects build 12.3.2.4854 […] The post Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from malware.news
Veeam security advisory (AV26-1009)
malware.news · 6d ago · October 7th, 2026
Serial number: AV26-1009 Date: October 7, 2026 As of October 7, 2026, Veeam is affected by vulnerabilities in the following product: Veeam Backup and Replication Prior to 12.3.2.P4 Prior to 13.03 Prior to 13.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. KB4934: Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4 Veeam Support Knowledge Base Article Link: Veeam security advisory (AV26-1009) - Canadian Centre for Cyber Security
-
mentioned by www.veeam.com
Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4 from 10/6 CVE-2025-64393 (9.4 critical) low-privileged RCE https://www. vee
www.veeam.com · 6d ago · October 7th, 2026
-
mentioned by www.veeam.com
Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4 from 10/6 CVE-2025-64393 (9.4 critical) low-privileged RCE https://www. vee
www.veeam.com · 6d ago · October 7th, 2026
-
update from socprime.com
CVE-2025-64393: Critical Veeam Backup & Replication RCE Vulnerability
socprime.com · 5d ago · October 8th, 2026
The flaw has received a CVSS 4.0 score of 9.4 and enables a low-privileged authenticated user with the Backup Viewer role to execute arbitrary code on the Veeam Backup Server. The vulnerability stems from insecure deserialization of untrusted data processed through the Mount Service. Given the sensitive role backup infrastructure plays in enterprise environments, successful exploitation could provide attackers with a powerful foothold for accessing recovery infrastructure, credentials, and other critical resources. All version 12 builds up to and including 12.3.2.4854 are affected, while Veeam Backup & Replication version 13 is not vulnerable. Organizations can strengthen defenses against emerging vulnerability exploitation by leveraging SOC Prime’s AI-Native Detection Intelligence Platform. Security teams can access continuously updated detection content and apply detections across 40+ SIEM, EDR, and Data Lake technologies. Security professionals can also use Uncoder AI to generate detection logic from threat intelligence, convert IOCs into hunting queries, refine existing rules, visualize attack flows, and translate detections across multiple security platforms. Contact Sales CVE-2025-64393 Analysis CVE-2025-64393 a
-
update from beyondmachines.net
Veeam Patches Critical Remote Code Execution Flaw in Backup & Replication Software Veeam patched four vulnerabilities in Backup & Replicatio
beyondmachines.net · 4d ago · October 9th, 2026
Veeam Patches Critical Remote Code Execution Flaw in Backup & Replication Software Veeam patched four vulnerabilities in Backup & Replicatio
via Mastodon https://beyondmachines.net/event_details/veeam-patches-critical-remote-code-execution-flaw-in-backup-replication-software-9-s-8-u-1/gD2P6Ple2L
-
update from infosec.exchange
https:// infosec.exchange/@beyondmachin es1/117410136678710967 # CyberSecurity # Veeam # RemoteCodeExecution # CriticalVulnerability # InfoS
infosec.exchange · 4d ago · October 9th, 2026
https:// infosec.exchange/@beyondmachin es1/117410136678710967 # CyberSecurity # Veeam # RemoteCodeExecution # CriticalVulnerability # InfoS
via Mastodon https://infosec.exchange/@beyondmachines1/117410136678710967