Skip to content
OpenAdvisories
High · 7.2 CVE-2025-24286 EUVD-2025-18670GHSA-qppv-c8jg-w628

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.

Published Jun 18, 2025 · Updated Jun 23, 2025 · Assigned by hackerone

Description

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.

Affected products

VendorProductAffectedFixed
Veeam Backup and Recovery 12.3 – ≤ 12.3 —

Advisories 2

References