Vulnerability intelligence
CVE-2025-23121
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user
CVSS Score
9.9
Critical
EPSS — Exploit Probability
1.3%
Riskier than 80% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Jun 9, 2026 · latest Jun 9, 2026
Tracked incidents
Coverage timeline
-
Veeam patches critical RCE in Backup & Replication 12.xsecurityaffairs.com · Jun 9, 2026