All vulnerabilities

Servers and applications

CVE-2025-24286

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.

Severity
Medium 4.9
Published
19 Jun 2025
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.3.2.3617
Sources
NVD

Affected software

SoftwareAffected versions
Veeam Backup & ReplicationServers and applications · cpe:a:veeam:veeam_backup_\&_replication
  • Every version before 12.3.2.3617

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-24286
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-24286