CVE-2025-59470 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
Critical CVSS: 9.0

CVE-2025-59470

This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
Vendor
Veeam
Product
Veeam Backup \& Replication
CWE
CWE-77
Yayın Tarihi
2026-01-08 17:15:48
Güncelleme
2026-01-14 20:59:08
Source Identifier
support@hackerone.com
KEV Date Added
-

Kategoriler

CWE-77 Veeam Backup \& Replication CRITICAL Veeam 2026

Referanslar

https://www.veeam.com/kb4792