Our experts keep you up-to-date on critical cyber threats (CVEs)
Veeam reports Multiple vulnerabilities in Veeam Backup & Replication, of which one Criticism (CVSS 9.4). Veeam has released updates for all vulnerabilities.
CVE-2025-64393 (critical, CVSS 9.4): A user with the Backup Viewer role can execute code on the backup Veeam server. Therefore, an account with limited permissions can also compromise the entire backup environment. Only version 12 is affected.
CVE-2026-58069 (high, CVSS 8.3): A registered Cloud Connect tenant can read arbitrary files on the service provider's server. Versions 12 and 13 are affected.
Customers with an Managed Services contract For their Veeam environment: we carry out the update proactively, in accordance with the agreed service. You don't need to do anything yourself. If in doubt, feel free to check with your regular contact what has been planned or implemented for your environment.
If you want to get started yourself, here are the steps:
Veeam Backup & Replication 13 13.0.2.29 and earlier builds > Upgrade to 13.0.3 (build 13.0.3.63) or 13.1 (build 13.1.0.411) or higher
Veeam Backup & Replication 12 12.3.2.4854 (P3) and earlier builds > Upgrade to 12.3.2 P4 (build 12.3.2.4934) or higher
Complete the update as soon as possible. More details can be found in the advice of Veeam: KB4934 and KB4902.
Have you No Managed Services contract, or do you want VanRoey to support you? Contact us to have this resolved for you. This can be done via email at support@vanroey.be (Enter Veeam your version) or call: 014 470 605. You can also create a ticket.
Can't create tickets? Ask here to get an account. If our Engineer needs to remotely control your PC, he or she will ask you to run this software .
Receive our newsletter including invitations to events & interesting industry news!
Receive alerts from current CVEs and tips to remedy them!
Discover how AI, ERP, customer engagement, e-commerce, SharePoint and data can connect your organisation more intelligently.
Attention: last places!