Skip to main content

Veeam Backup Replication CVE-2025-55125

HIGH
Command Injection (CWE-77)
2026-01-08 support@hackerone.com
RCE Veeam Backup Replication
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 08, 2026 - 17:15 nvd
HIGH 7.8

DescriptionCVE.org

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.

AnalysisAI

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file. [CVSS 7.8 HIGH]

Technical ContextAI

Classified as CWE-77 (Command Injection). Affects Veeam Backup \& Replication. This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.

RemediationAI

Monitor vendor advisories for a patch.

More in Veeam Backup Replication

View all
CVE-2024-40711 CRITICAL POC
9.8 Sep 07

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code exec
CVE-2020-15518 HIGH POC
8.8 Jul 03

VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, w
CVE-2026-21667 CRITICAL
9.9 Mar 12

A second RCE vulnerability in Veeam Backup & Replication allows any authenticated domain user to execute code on the Bac
CVE-2026-21666 CRITICAL
9.9 Mar 12

Veeam Backup & Replication allows an authenticated domain user to achieve remote code execution on the Backup Server. Wi
CVE-2026-21669 CRITICAL
9.9 Mar 12

Yet another Veeam Backup & Replication RCE vulnerability allowing authenticated domain users to execute code on the Back
CVE-2024-29849 CRITICAL
9.8 May 22

Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.

CVE-2022-26501 CRITICAL
9.8 Mar 17

Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). Rated critical severity (CVSS 9.8)
CVE-2021-35971 CRITICAL
9.8 Jun 30

Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserializati
CVE-2026-21671 CRITICAL
9.1 Mar 12

Veeam Backup & Replication allows Backup Administrators to achieve RCE in high-availability deployments. While requiring
CVE-2025-59469 CRITICAL
9.0 Jan 08

Veeam allows Backup or Tape Operators to write files as root on the server. An operator-level role achieving root file w
CVE-2026-21668 HIGH
8.8 Mar 12

Authenticated domain users can bypass file access restrictions on Backup Repository systems to read, modify, or delete a
CVE-2024-42456 HIGH
8.8 Dec 04

A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a me

Same weakness CWE-77 – Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2015-2051 HIGH POC
8.8
CVE-2017-6327 HIGH POC
8.8
CVE-2023-34960 CRITICAL POC
9.8
CVE-2023-37679 CRITICAL POC
9.8

Same technique RCE

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2017-7269 CRITICAL POC
9.8
CVE-2022-47966 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2023-3519 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8

Share

CVE-2025-55125 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy