Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

Keypoints

• Veeam patched a critical remote code execution flaw in Backup & Replication.
• The vulnerability is tracked as CVE-2026-44963 and scores 9.4 on the CVSS scale.
• An authenticated domain user could exploit the issue on the Backup Server.
• The flaw affects Veeam Backup & Replication 12.3.2.4465 and earlier 12.x versions.
• Version 12.3.2.4854 resolves the issue, while version 13.x is not impacted.