CVE-2025-64393

LOWCVSS 9.4 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Recommended action window: Monitor and triage in normal cycle

NVD description

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

0.0/ 10 priority

Other references

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Activity timeline3 mentions / 2d

Referenced assets2 URLs

By indicator

Full discourse3 posts

Daily CyberSecurity@Daily_CyberSec1d
Critical Veeam Backup vulnerability CVE-2025-64393 (CVSS 9.4) enables RCE by low-privileged users. Update to 12.3.2 P4 now. #Veeam #VeeamBackup #CVE202564393 #RCE #Deserialization #Ransomware #BackupSecurity #Vulnerability https://securityonline.info/veeam-backup-vulnerability-cve-2025-64393/
1502441.2K
13.0K followersView on X
The Daily Tech Feed@dailytechonx17h
Big security alert: Veeam Backup & Replication just fixed a remote code execution flaw (CVE-2025-64393) plus XSS, arbitrary file read, and credential exposure—CVSS up to 9.4. If you're on version 12 (build ≤ 12.3.2.4854) or certain 13 builds, update to 12.3.2.4934 now. #Cybersecurity #Veeam #Vulnerabilities #RCE #XSS #Cybersecurity #Veeam #RCE #XSS #PatchNow #DataProtection https://thedailytechfeed.com/critical-veeam-rce-xss-flaws-discovered-patch-immediately/
0001031
783 followersView on X
キタきつね@foxbook18h
Veeam Backup & Replication Vulnerability: Critical RCE Flaw CVE-2025-64393 （Veeam Backup & Replicationに重大なRCE脆弱性、低権限ユーザーからバックアップサーバー侵害の恐れ） #SecurityOnline (Oct 7) https://securityonline.info/veeam-backup-vulnerability-cve-2025-64393/
00000189
5.0K followersView on X