Forwarded Taiwan Computer Network Crisis Coordination Center Cybersecurity Information Alert TWCERTCC-200-202610-00000012

[Description]
Veeam Backup Replication is Veeam's core backup software. Recently, Veeam released a critical security vulnerability advisory (CVE-2025-64393, CVSS 4.x: 9.4). This vulnerability allows low-privileged users with Backup Viewer permissions to execute remote code (RCE) on the backup server through insecure deserialization of untrusted data received via the Mount Service.

[Affected Platforms]
Veeam Backup Replication versions 12.3.2 P3 12.3.2.4854 and earlier (including 12.3.2.4854)

[Recommended Measures]
Please update to Veeam Backup Replication version 12.3.2 P4 12.3.2.4934 or later (including 12.3.2.4934)

[References]
1. https://www.twcert.org.tw/tw/cp-169-11275-1a695-1.html