{"id":1242,"date":"2026-06-09T19:43:53","date_gmt":"2026-06-09T19:43:53","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=1242"},"modified":"2026-06-09T19:43:53","modified_gmt":"2026-06-09T19:43:53","slug":"veeam-backup-replication-rce-flaw-lets-domain-users-run-remote-code","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=1242","title":{"rendered":"Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Jun 09, 2026<\/span><\/span>Vulnerability \/ Backup Software<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution.<\/p>\n

Tracked as CVE-2026-44963<\/b>, the vulnerability carries a CVSS score of 9.4 out of a maximum of 10.0.<\/p>\n

\u00abA vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user,\u00bb Veeam said<\/a> in a Tuesday advisory.<\/p>\n

It credited watchTowr researcher Sina Kheirkhah for responsibly discovering and reporting the issue. It impacts Veeam Backup & Replication 12.3.2.4465 and all earlier versions of 12 builds.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

Veeam has noted that the vulnerability does not affect any version 13.x build of the backup software due to architectural changes introduced in version 13.<\/p>\n

The shortcoming has been addressed in Veeam Backup & Replication version 12.3.2.4854.<\/p>\n

In March 2026, Veeam resolved multiple critical vulnerabilities in Backup & Replication software that, if successfully exploited, could result in remote code execution.<\/p>\n

It’s essential that users update to the latest version for optimal version, particularly given that prior vulnerabilities in the program have been exploited by bad actors, including ransomware groups.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

\ue804Ravie Lakshmanan\ue802Jun 09, 2026Vulnerability \/ Backup Software Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution.…<\/p>\n","protected":false},"author":1,"featured_media":1243,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[648,10,83,70,332,316,12,649,1774,826,647],"class_list":["post-1242","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-backup","tag-code","tag-domain","tag-flaw","tag-lets","tag-rce","tag-remote","tag-replication","tag-run","tag-users","tag-veeam"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/1242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1242"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/1242\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/1243"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}