Veeam Backup & Replication RCE (CVE-2025-23120) — Domain Users Can Pwn Your Backups
A deserialization vulnerability in Veeam Backup & Replication allows any authenticated domain user to execute arbitrary code on the backup server, potentially destroying or encrypting backups before a ransomware attack.