CVE-2025-59470
9.0CRITICALThis vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
Publicado: 1/8/2026Actualizado: 1/14/2026
Descripción
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
Análisis IAImpulsado por IA
Productos Afectados
veeamveeam_backup_\&_replication
Referencias
- https://www.veeam.com/kb4792Vendor Advisory