CVE-2025-32406: An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML…

PriorityP350high8.6CVSS 3.1

AVNACLPRNUINSCCHINAN

EPSS

0.49%

38.6th percentile

An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
nakivo	backup_replication_director	>= 10.3 < 11.0.2	11.0.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.