A critical vulnerability (CVE-2025-23114) in the Veeam Updater component allows attackers to execute arbitrary code and gain root access on affected servers via Man-in-the-Middle attacks. Multiple older Veeam Backup products are vulnerable, but patches are available. The vulnerability exploits insecure communication channels during software updates, enabling malicious code injection. Veeam has released updated versions and recommends applying patches, monitoring network traffic, and isolating backup appliances. A cybersecurity firm, Technijian, offers services to help organizations assess and mitigate this risk. ... Read More