Description
A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Veeam | Backup and Replication | 12.3.2 – ≤ 12.3.2 | — |
Advisories 2
- WID-SEC-2025-2274 Veeam Backup & Replication: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 30, 2025
- NCSC-2025-0317 Kwetsbaarheden verholpen in Veeam Backup & Replication NCSC-NL (Netherlands) · Oct 15, 2025