Hello Community!
Veeam releaesed an update to it’s VBR product today. Click the link below to view the KB:
The following CVEs were addressed with this update:
CVE-2025-23121 (critical severity)
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user
CVE-2025-24286 (high severity)
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code
CVE-2025-24287 (medium severity)
A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions.
It is obviously recommended to perform the update as soon as you can.
You can also view other fixes/improvements from the below KB, as well as find the updater and full ISOs:
Best.
