167 matches found
CVE-2026-32996
CVE-2026-32996 Veeam Remote Code Execution RCE on the Backup Server by an authenticated domain user. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC root@kitploit: CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...
VulnCheck KEV: CVE-2026-44963
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.
The vulnerability of the backup server of the Veeam Backup & Replication software for cloud, virtual, and physical systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
CVE-2026-44963
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
Veeam Backup & Replication’s vulnerability handling capabilities
Veeam has identified a vulnerability in Backup & Replication. This vulnerability allows an authenticated domain user to execute remote code on the Backup Server. As a result, an attacker with domain credentials can exploit this vulnerability to gain control over backup operations. This is a...
EUVD-2026-35868
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
CVE-2026-44963
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
CVE-2026-44963
Veeam Backup & Replication is affected by a critical deserialization flaw in the Backup Server that allows an authenticated domain user to execute arbitrary code over the network. This vulnerability targets domain-joined installations and can lead to full compromise of the backup infrastructure a...
CVE-2026-44963
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
CVE-2026-44963
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
PT-2026-47752
Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions prior to 12.3.2.4854 Description A critical flaw in the deserialization mechanism allows an authenticated domain user with low privileges to execute arbitrary code remotely on the Backup Server. This issue...
CVE-2026-44963: Deserialization of Untrusted Data
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
CVE-2026-32999
Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...
CVE-2026-32999
Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...
CVE-2026-32999
Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...
CVE-2026-32999
Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...
Veeam Backup and Replication 12.x < 12.3.2.4465 Multiple Vulnerabilities (KB4830)
The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.4465. It is, therefore, affected by multiple vulnerabilities, including: - A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...
CVE-2026-21669
A vulnerability allowing an authenticated domain user to perform remote code execution RCE on the Backup Server...