High WID-SEC-2026-0017 4 CVEs

Veeam Backup & Replication: Mehrere Schwachstellen

Published Jan 5, 2026 · Updated Jan 12, 2026 · Revision 3 · de-DE

Vendor: Veeam Product: Backup & Replication

Summary

Ein privilegierter Angreifer kann mehrere Schwachstellen in Veeam Backup & Replication ausnutzen um beliebige Dateien zu schreiben und Programmcode, im schlimmsten Fall mit Rootrechten, auszuführen.

Product

Veeam Backup & Replication ist eine Datensicherungslösung für VMware vSphere- und Microsoft Hyper-V-Umgebungen.

Vulnerabilities 4

Critical 9.0

CVE-2025-59468

This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending…

Veeam Backup and Recovery

Jan 8, 2026
Critical 9.0

CVE-2025-59469

This vulnerability allows a Backup or Tape Operator to write files as root.

Veeam Backup and Recovery

Jan 8, 2026
Critical 9.0

CVE-2025-59470 Public exploit

This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a ma…

Veeam Backup and Recovery

Jan 8, 2026
High 7.8

CVE-2025-55125

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malici…

Veeam Backup and Recovery

Jan 8, 2026

Revision history

2026-01-12 #3
Produkversion präzisiert
2026-01-08 #2
Referenz(en) aufgenommen: EUVD-2026-1515, EUVD-2026-1512, EUVD-2026-1517, EUVD-2026-1513
2026-01-05 #1
Initiale Fassung

References

Veeam Support Knowledge Base vom 2026-01-05
https://www.veeam.com/kb4792