CVE-2025-23120

Description

References

• veeam.com/kb4724 · Vendor Advisory
• labs.watchtowr.com/by-executive-order-we-are-banning-blacklists-domain-level-rce-in-veeam-backup-replication-cve-2025-23120 · Exploit

Weitere Schwachstellen in veeam backup & replication

• CVE-2026-21708KRITISCH 9.9A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
• CVE-2026-21671KRITISCH 9.1A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabilit…
• CVE-2026-21670MITTEL 6.5A vulnerability allowing a low-privileged user to extract saved SSH credentials.
• CVE-2026-21669KRITISCH 9.9A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
• CVE-2026-21668MITTEL 6.5A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.