- 175/2026
- Critical
Veeam has released a security update to fix a vulnerability in Veeam Backup & Replication 12.3.2.4465 and all earlier versions 12 builds.
The addressed vulnerability could allow the authenticated domain user to execute arbitrary code on the Backup Server.
The addressed vulnerability:
Veeam Backup & Replication Remote Code Execution Vulnerability (CVE-2026- 44963):
- CVSS 4.0: 9.4
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Consequences: Remote Code Execution
Vulnerabilities
CVE-2026-44963
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.