Arbitrary Code Execution via Backup Viewer in Veeam Backup & Replication
CVE-2025-64393 Published on October 7, 2026

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

NVD

Weakness Type

What is a Marshaling, Unmarshaling Vulnerability?

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

CVE-2025-64393 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.


Affected Versions

Veeam Backup and Replication: