← Back to browse · API

CVE-2025-48983

Severity
CRITICAL
CVSS
10.0
EPSS
0.00817
Risk score
40.29
CISA KEV
No
PoC
No
Published
2025-10-30
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-37229, GHSA-38J8-HQ5R-G743
Products
Veeam:Backup and Replication 12.3.2 ≤12.3.2
Sources
euvd EUVD-2025-37229

Description

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.

References