FlagThis

Abstract

Veeam Backup and Replication has disclosed a critical remote code execution vulnerability (CVE-2026-44963, CVSS 9.4) allowing authenticated domain users to execute arbitrary code on backup servers. This flaw exposes virtually every domain-joined deployment to potential full system compromise. The advisory notes a broader industry trend where threat actors target backup infrastructure—including platforms like Commvault and NAKIVO—to eliminate recovery options and maximize ransomware leverage.