Veeam Backup Archives

A serious vulnerability in Veeam's Backup & Replication software that might lead to remote code execution has been fixed with security patches. The vulnerability, known as CVE-2026-44963, has a CVSS score of 9.4 out of a possible 10.0. A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user, Veeam said in a Tuesday advisory. Sina Kheirkhah, a watchTowr researcher, was credited with responsibly identifying and reporting the problem. Veeam Backup & Replication 12.3.2.4465 and all previous builds of 12 are affected. Due to architectural modifications made in version 13, Veeam has observed that the vulnerability read more about Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code Get up to date on the&n...

The recently discovered ransomware group known as EstateRansomware is taking use of a security hole in the Veeam Backup & Replication software that has been patched. The basic operandi of the threat actor, according to Group-IB, based in Singapore, which identified them in early April 2024, involved exploiting CVE-2023-27532 (CVSS score: 7.5) to carry out the harmful actions. It is claimed that an inactive account on a Fortinet FortiGate firewall SSL VPN appliance allowed for initial access to the target environment. According to a study released today by security researcher Yeo Zi Wei, the threat actor used the SSL VPN service to pivot laterally from the FortiGate Firewall and get access to the failover server read more about New Ransomware Group Exploiting Veeam Backup Soft...

Tag: Veeam Backup

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

New Ransomware Group Exploiting Veeam Backup Software Vulnerability