CVE-2025-48983

CVSS 10 CRITICALEPSS 0.8%CWE-284

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Veeam · Backup and Replication

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.veeam.com/kb4771