critical9.0
CVE-2025-59470
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
Impact
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veeam | Veeam Backup \& Replication | from 13.0.0.4967 before 13.0.1.1071 |