CVE-2025-64393Vulnerability
Reported by 3 independent sources · first reported by CERT-FR · last reported
Last reported 12 days ago
higher than 28% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More“…icsearch), CVE-2026-104711, CVE-2026-104712, CVE-2026-104713, CVE-2026-104714 (Apache Struts), CVE-2026-91140 (Progress DataDirect), CVE-2025-64393, CVE-2026-58069 (Veeam Backup & Replication), CVE-2026-32740 (Next.js), CVE-2026-18397 (Thales SConnect), CVE-2026-84388 (Fortinet F…”
-
12th October – Threat Intelligence Report“These include CVE-2025-64393, a critical remote code execution flaw rated CVSS 9.4 that allows low-privileged backup users to execute commands on affected servers.”
-
Bulletin d'actualité CERTFR-2026-ACT-043 (12 octobre 2026)“CVE-2025-64393”
-
Multiples vulnérabilités dans les produits Veeam (07 octobre 2026)“Référence CVE CVE-2025-64393”
Indicators reported together
named in the same reports- hxxps://www.veeam[.]com/kb4934in 2 reports
- fbijobs[.]govin 1 report
- hxxps://docs.gitlab[.]com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/in 1 report
- hxxps://confluence.atlassian[.]com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.htmlin 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2026-21589, CVE-2026-102255, CVE-2026-76455, CVE-2026-104711, CVE-2026-102489, CVE-2026-102490, CVE-2026-90970, CVE-2026-88779, CVE-2026-96940, CVE-2026-59265, CVE-2026-63277, CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-91140, CVE-2026-102256
Thanks — we review every report.