Search/New Veeam vulnerabilities expose backup servers to RCE attacks
● News

New Veeam vulnerabilities expose backup servers to RCE attacks

Veeam released security updates to patch multiple security flaws in its Backup & Replication software, including a critical remote code execution (RCE) vulnerability. Tracked as CVE-2025-59470, this RCE security flaw affects Veeam Backup & Replication 13.0.1.180 and all earlier version 13 builds. "This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter," Veeam explained in a Tuesday advisory. However, the information technology company adjusted its rating to high severity because it can only be exploited by attackers with the Backup or Tape Operator roles. "The Backup and Tape Operator roles are considered highly privileged roles and should be protected as such. Following Veeam's…

Read original article
Source
bleepingcomputer.com
Published
Jan 7, 2026
Mentions
10
language: en
Connections
11 relationships