Veeam has fixed a critical Backup & Replication flaw CVE-2025-23120.The vulnerability could allow remote code execution and impacted version 12.3.0.310 and earlier.The issue was reported by security researcher Piotr Bazydlo of watchTowr.Veeam's patch blocks the identified gadgets, but further deserialization vulnerabilities may still exist.