Back Digital.Nhs.Uk

CC-4794 - Veeam Releases Security Advisory for Critical Vulnerability in Backup & Replication

Digital.Nhs.Uk •[email protected] (NHS Digital) • June 9, 2026

Share: View original

CVE‑2026‑44963 allows authenticated attackers to execute remote code on Veeam Backup & Replication servers.

The following platforms are known to be affected:

Veeam Backup & Replication

Note: Any version of 13.x build is unaffected.

Veeam has released a security advisory to address a critical vulnerability in Veeam Backup & Replication. Successful exploitation could allow a remote authenticated attacker with domain user privileges to execute remote code on affected backup servers.

Affected organisations are encouraged to review Veeam advisory KB4869 and apply the relevant update as soon as possible.

Last edited: 9 June 2026 1:52 pm

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Veeam Backup Exposes Organizations to Attacks Veeam has disclosed a critical vulnerability (CVE-2026-44963) affecting its Backup & Replication software, allowing authenticated domain users to execute remote code on domain-joined backup servers. This flaw impacts versions 12.3.2.4465 and earlier, with a patch available in version 12.3.2.4854. Many organizations have joined their Veeam servers to a Windows domain, contrary to best practices, making them vulnerable to exploitation. Although no active exploitation has been reported, the potential for attackers to develop exploits following the patch release is significant. Ransomware gangs have historically targeted Veeam servers to hinder recovery efforts and steal sensitive data. Veeam's products are widely used, with over 550,000 customers globally, including a large percentage of Fortune 500 companies. Security teams are urged to apply the latest updates immediately to mitigate risks. 7 sources 72

CC-4794 - Veeam Releases Security Advisory for Critical Vulnerability in Backup & Replication

The full story

Extracted Entities

Attack Types (1)

Platforms (1)