Security1 hOctober 17, 2026, 13:20

Veeam Backup & Replication flaw CVE-2025-64393 rated 9.4

CVE-2025-64393, rated 9.4 in CVSS v4.0, affects Veeam Backup & Replication 12 through 12.3.2.4854. Exploitation combines the Mount Service deserialisation flaw with the Backup Viewer role to achieve remote code execution as SYSTEM. The vendor fix is documented in Veeam KB4934.

DEV Community

Open source

CVSS 9.4: remote code execution as SYSTEM
Affects versions 12 through 12.3.2.4854; fix in Veeam KB4934
Exploitation requires Backup Viewer role and Mount Service access
ZoomEye found 15,647 visible Veeam Backup assets

#Veeam

Nginx UI RCE flaw CVE-2026-107806 rated 9.4 Critical

Security

CISA: Monta EV charging platform has four flaws, worst rated CVSS 9.4

Security

PEERSTITCH malware delivered via FortiOS flaw CVE-2025-61624

Security

Veeam Backup & Replication flaw CVE-2025-64393 rated 9.4

Nginx UI RCE flaw CVE-2026-107806 rated 9.4 Critical

CISA: Monta EV charging platform has four flaws, worst rated CVSS 9.4

PEERSTITCH malware delivered via FortiOS flaw CVE-2025-61624

CVE-2025-38680 in Linux USB Video Class: reading the CVSS 7.1 score