PT-2026-1817 · Veeam · Veeam Backup & Replication

Publicado 2026-01-07 · Atualizado 2026-01-09 · CVE-2025-55125

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions prior to 13.0.1.1071

Description The software contains a flaw that permits a Backup or Tape Operator to execute code remotely as root by crafting a malicious backup configuration file.

Recommendations Update to version 13.0.1.1071 or later.

Correção

RCE

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2025-55125

Produtos afetados

Veeam Backup & Replication

Referências · 8

• https://twitter.com/threatcluster/status/2008891536948207783 · Publicação no Twitter
• https://twitter.com/DarkWebInformer/status/2008933458098208813 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-55125 · Nota de Segurança
• https://twitter.com/CVEnew/status/2009462359413412172 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-55125 · Aviso do Fabricante
• https://twitter.com/CCBalert/status/2009384485679251616 · Publicação no Twitter
• https://twitter.com/securityRSS/status/2008932464941552121 · Publicação no Twitter
• https://veeam.com/kb4792 · Aviso do Fabricante