CVE-2025-64393

Published Oct 7, 2026

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-64393 is a vulnerability in Veeam Backup & Replication that stems from the insecure deserialization of untrusted data processed through the Mount Service. This flaw allows an authenticated, low-privileged user assigned the Backup Viewer role to execute arbitrary code on the Veeam Backup Server. By sending a crafted serialized object to the server, an attacker can trigger remote code execution (RCE) within the context of the Veeam service account. The vulnerability affects Veeam Backup & Replication version 12.3.2 P3 (build 12.3.2.4854) and older builds, while version 13 builds are unaffected. Veeam addressed the issue in the release of version 12.3.2 P4 (build 12.3.2.4934). The flaw was reported to Veeam through HackerOne, and at the time of its public disclosure, there were no reports of active exploitation in the wild or public proof-of-concept exploits.

Description: This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
Source: support@hackerone.com
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.4
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

Weaknesses

support@hackerone.com: CWE-502

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 5

References