VulnerabilitycriticalExploited in the wild

Critical Veeam RCE flaw Lets Low

Security Affairsby @securityaffairsJun 14, 2026 · 11:48 UTC (Jun 14, 2026)2 min read4 · 1 read

Read at securityaffairs.com

Analyze CVE-2026-44963 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-44963 CVE-2025-23121

Tags: cve-2025-23121 cve-2026-44963 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-23121	Authenticated Domain-User RCE in Veeam Backup & Replication	8.8	22%		Jun 19, 2025
CVE-2026-44963	A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user	9.4	2%	PoC	Jun 9, 2026

From the original article

2 min read at securityaffairs.com

Veeam addressed a critical RCE vulnerability flaw in Backup & Replication that lets low-privileged domain users take control of backup servers. Veeam has patched a critical remote code execution vulnerability, tracked as CVE-2026-44963 (CVSS v4 Score of 9. 4), affecting Backup & Replication version 12.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.