CVE-2025-48983

Critical · 9.9

CVSS

9.9

EPSS

0.8%

Published

Oct 31, 2025

CISA due date

—

The record

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.

Affected packages

Ecosystem	Package	Introduced	Fixed