Exploit for Veeam backup and Replication Deserialization CVE-2025-23120
Check out the blog post from WatchTowr for technical details. All credits goes to them, I simply applied the bypass they described.
The attack can lead to remote command execution in case the Veeam server is the same domain as the attacker machine. In that case an authenticated attacker may exploit the vulnerability and gain SYSTEM access to the server.
