Several Code Execution Flaws Patched in Veeam Backup & Replication

Keypoints

• Veeam’s latest update fixes critical security vulnerabilities in Backup & Replication.
• The vulnerabilities can be exploited by attackers with privileged roles to execute remote code or write files as root.
• CVE-2025-59470 and other CVEs have high or critical severity ratings but are currently unexploited in the wild.
• Threat actors have historically targeted Veeam vulnerabilities in ransomware and other attacks.
• Organizations are advised to update their systems promptly to mitigate risk.