Skip to content

Veeam Patches Critical Vulnerability - 20250618001

Overview

Veeam has published an update addressing a critical vulnerability in their Backup & Replication product, potentially allowing remote code execution.

What is vulnerable?

Product(s) Affected Version(s) CVE CVSS Severity
Veeam Backup & Replication 12.3 prior to 12.3.1.1139 CVE-2025-23121  9.9 Critical

What has been observed?

The WA SOC has not received any reports of exploitation of this vulnerability on Western Australia Government networks at the time of writing.

Recommendation

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):