Veeam Backup & Replication Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Veeam Backup & Replication versions 12, 12.1, 12.2, 12.3, and 12.3.1. This vulnerability allows an authenticated domain user to execute arbitrary code on the Backup Server.

Impact

Exploitation of this vulnerability allows for remote code execution on the Backup Server.

Remediation

Users can upgrade to Veeam Backup & Replication version 12.3.2.4465 to address this vulnerability.

Added: Mar 12, 2026, 3:23 PM
Updated: Mar 12, 2026, 3:23 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
10.0
exploitability
4.9
remediation
7.7
relevance
3.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.