Posting Date: 2026/10/15

【Vulnerability Alert】Veeam Backup Replication, Veeam's core backup software, has a critical security vulnerability (CVE-2025-64393)

  • Subject: 【Vulnerability Alert】Veeam Backup Replication, Veeam's core backup software, has a critical security vulnerability (CVE-2025-64393)


  • Description:
    • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000012
    • Veeam Backup Replication is Veeam's core backup software. Veeam recently released a critical security vulnerability advisory (CVE-2025-64393, CVSS 4.x: 9.4). This vulnerability allows a low-privileged user with the Backup Viewer role to execute remote code (RCE) on the backup server through unsafe deserialization of untrusted data received via the mount service.
  • Affected Platforms:
    • Veeam Backup Replication versions 12.3.2 P3 12.3.2.4854 (inclusive) and earlier
  • Recommended Actions:
    • Please update to Veeam Backup Replication version 12.3.2 P4 12.3.2.4934 (inclusive) or later
  • References:
    1. https://www.twcert.org.tw/tw/cp-169-11275-1a695-1.html

Computer and Communication Center
Network System Division