{"metadata": {"vulnerability": "cve-2026-44963", "count": 52, "kinds": {"milestone": 7, "sighting": 27, "kev": 0, "other": 18}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0188", "record": "NCSC-2026-0188", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-08T15:00:02.447Z", "date_only": false, "value": "2026-05-08T15:00:02.447Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-44963", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1834", "record": "WID-SEC-W-2026-1834", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1834", "record": "WID-SEC-W-2026-1834", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1834", "record": "WID-SEC-W-2026-1834", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0712", "record": "CERTFR-2026-AVI-0712", "field": "last_revision_date"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": true, "value": "2026-06-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0712", "record": "CERTFR-2026-AVI-0712", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0712", "record": "CERTFR-2026-AVI-0712", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-09T12:30:25.443Z", "date_only": false, "value": "2026-06-09T12:30:25.443072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu77dgbhh2y", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "23d79fc3-d06a-4035-bc53-ccc9f61cc35d", "content": "\ud83d\udd17 CVE : CVE-2026-44963", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu77dgbhh2y"}, {"timestamp": "2026-06-09T13:57:34.254Z", "date_only": false, "value": "2026-06-09T13:57:34.254030Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/116720497573755563", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "0568894d-8813-4a44-8f13-e23f2df5b16c", "content": "\u26a0\ufe0f \ud83d\udc40 Source: Reported by Sina Kheirkhah [@SinSinology] of #watchtowr  \ud83c\udf7f \ud83d\udc47 CVE-2026-44963\u2b07\ufe0f A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.\nSeverity: CriticalCVSS v4 Score: 9.4\ud83d\udc47 https://www.veeam.com/kb4869\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0712/\n\ud83e\ude79 \ud83d\udc47 https://www.veeam.com/kb4696\n#CyberVeille #veeam", "url": "https://infosec.exchange/users/decio/statuses/116720497573755563"}, {"timestamp": "2026-06-09T14:39:47Z", "date_only": false, "value": "2026-06-09T14:39:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/06/veeam-backup-replication-rce-flaw-lets.html", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "77e15b5e-47c8-48e7-804e-2c6ad7ea4ce3", "content": "Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution.\n\nTracked as CVE-2026-44963, the vulnerability carries a CVSS score of 9.4 out of a maximum of 10.0.\n\n\"A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user,\" Veeam said in a Tuesday advisory.\n\nIt", "url": "https://thehackernews.com/2026/06/veeam-backup-replication-rce-flaw-lets.html"}, {"timestamp": "2026-06-09T14:53:37.282Z", "date_only": false, "value": "2026-06-09T14:53:37.282834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnuh7en4de2k", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "9f63970f-b703-4b44-a569-0826445c2c24", "content": "Critical Veeam Backup & Replication RCE Flaw Sends Shockwaves Through Enterprise Security: CVE-2026-44963 Raises Fresh Ransomware Alarm +\u00a0Video\n\nIntroduction: A Silent Weak Point Inside Enterprise Backups Backup systems are supposed to be the last line of defense, the digital \u201clife raft\u201d when\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnuh7en4de2k"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1834", "record": "WID-SEC-W-2026-1834", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1834", "record": "WID-SEC-W-2026-1834", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-09T22:27:01.735Z", "date_only": false, "value": "2026-06-09T22:27:01.735Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-44963", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-09T22:27:01.735Z", "date_only": false, "value": "2026-06-09T22:27:01.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "cve-2026-44963", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-09T23:16:52Z", "date_only": false, "value": "2026-06-09T23:16:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QGVW-VFMJ-PRRG", "record": "GHSA-QGVW-VFMJ-PRRG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-09T23:16:52.617Z", "date_only": false, "value": "2026-06-09T23:16:52.617", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44963", "record": "FKIE_CVE-2026-44963", "field": "published"}, {"timestamp": "2026-06-10T00:00:37.437Z", "date_only": false, "value": "2026-06-10T00:00:37.437017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnvfridanz2m", "record": "cve-2026-44963", "field": "creation_timestamp", "uuid": "c5360498-5762-462a-9b30-2f928ad4ff6c", "content": "\ud83d\udea8 Veeam Backup & Replication (CVSS 9.4, CRITICAL): Auth\u2019d domain users can run code on Backup Server via unsafe deserialization. No patch \u2014 restrict access now & monitor! https://radar.offseq.com/threat/cve-2026-44963-cwe-502-deserialization-of-untruste-55909ebc #OffSeq #Veeam #Security", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mnvfridanz2m"}, {"timestamp": "2026-06-10T00:00:41.791Z", "date_only": false, "value": "2026-06-10T00:00:41.791862Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116722868843960390", "record": "cve-2026-44963", "field": "creation_timestamp", "uuid": "54525585-63f3-4167-8a55-458014b9a19b", "content": "\u26a0\ufe0f CRITICAL: Veeam Backup & Replication flaw (CVE-2026-44963, CVSS 9.4) allows authenticated domain users to execute code via unsafe deserialization. No patch yet \u2014 restrict access & monitor closely! https://radar.offseq.com/threat/cve-2026-44963-cwe-502-deserialization-of-untruste-55909ebc #OffSeq #Veeam #Vuln #RCE", "url": "https://infosec.exchange/users/offseq/statuses/116722868843960390"}, {"timestamp": "2026-06-10T00:31:49Z", "date_only": false, "value": "2026-06-10T00:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QGVW-VFMJ-PRRG", "record": "GHSA-QGVW-VFMJ-PRRG", "field": "published"}, {"timestamp": "2026-06-10T00:31:49Z", "date_only": false, "value": "2026-06-10T00:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QGVW-VFMJ-PRRG", "record": "GHSA-QGVW-VFMJ-PRRG", "field": "modified"}, {"timestamp": "2026-06-10T03:34:44.159Z", "date_only": false, "value": "2026-06-10T03:34:44.159902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnvrqefmrh2l", "record": "cve-2026-44963", "field": "creation_timestamp", "uuid": "1815a57c-ab88-40d2-9ab6-0e8b3737a71e", "content": "\ud83d\udcf0 Celah Kritis Baru Veeam Backup & Replication Ancam Server Cadangan dengan Rencana RCE\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/10/celah-kritis-veeam-backup-replication-ancam-rce-server/\n\n#cve-2026-44963 #komponenPc #ransomwareAkira #rce #remoteCodeExecution #serverBacku", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnvrqefmrh2l"}, {"timestamp": "2026-06-10T03:45:36.238Z", "date_only": false, "value": "2026-06-10T03:45:36.238613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnvsd4cpjq2h", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "50c743eb-ad5a-4f49-8e8d-2bd39efc956b", "content": "Veeam fixed CVE-2026-44963, a critical 9.4 RCE flaw in Backup and Replication that let authenticated domain users run code on the Backup Server. Update to 12.3.2.4854. #Veeam #CVE202644963 #BackupRCE", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnvsd4cpjq2h"}, {"timestamp": "2026-06-10T03:59:49.399Z", "date_only": false, "value": "2026-06-10T03:59:49.399430Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-44963", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-10T03:59:49.399Z", "date_only": false, "value": "2026-06-10T03:59:49.399430Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44963", "record": "FKIE_CVE-2026-44963", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-10T06:40:56.821Z", "date_only": false, "value": "2026-06-10T06:40:56.821+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1834", "record": "WID-SEC-W-2026-1834", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-10T09:00:04Z", "date_only": false, "value": "2026-06-10T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZHpMnVOz2cJfIOonPjLT3_mqz43XsQAtrT-ty2tkYMtXDqE", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "90fbb915-0820-4e2c-bb0b-963f33f61eee"}, {"timestamp": "2026-06-10T10:04:13.073Z", "date_only": false, "value": "2026-06-10T10:04:13.073Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-44963", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-10T10:04:13.073Z", "date_only": false, "value": "2026-06-10T10:04:13.073Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-44963", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-10T12:02:45.831Z", "date_only": false, "value": "2026-06-10T12:02:45.831098Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0188", "record": "NCSC-2026-0188", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-10T12:02:45.831Z", "date_only": false, "value": "2026-06-10T12:02:45.831098Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0188", "record": "NCSC-2026-0188", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-10T12:02:45.831Z", "date_only": false, "value": "2026-06-10T12:02:45.831098Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0188", "record": "NCSC-2026-0188", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-10T15:55:07.428Z", "date_only": false, "value": "2026-06-10T15:55:07.428156Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116726622213876794", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "207c1089-df8b-449b-afba-e0cc1816174e", "content": "A lot of offensive activities were identified targeting Veeam Backup and Replication (CVE-2026-44963) https://vuldb.com/vuln/370081/cti", "url": "https://infosec.exchange/users/vuldb/statuses/116726622213876794"}, {"timestamp": "2026-06-10T17:46:28.567Z", "date_only": false, "value": "2026-06-10T17:46:28.567402Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mnxbdazbw22s", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "b492cccd-b945-484e-86f1-15f34a2c501c", "content": "#Veeam: Veeam has released security updates to patch a critical Backup & Replication security flaw that can be exploited to gain remote code execution (#RCE) vulnerability CVE-2026-44963 on domain-joined backup servers:\n\ud83d\udc47\n\nwww.bleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3mnxbdazbw22s"}, {"timestamp": "2026-06-12T11:00:06.507Z", "date_only": false, "value": "2026-06-12T11:00:06.507436Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mo3lkkpkzh2n", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "adb540f2-2cc3-432a-841f-ec2564738ab2", "content": "Veeam CVE-2026-44963 (CVSS 9.4): any domain user gets RCE on your backup server. No admin needed.\u00a0\n\nHistorical pattern: PoC drops within 48h of Veeam disclosure.\u00a0\n\nPatch to 12.3.2.4854 now \u2014 no workaround.\u00a0\n#Veeam #Ransomware #CyberSecurity", "url": "https://bsky.app/profile/diesec.bsky.social/post/3mo3lkkpkzh2n"}, {"timestamp": "2026-06-14T23:30:09.689Z", "date_only": false, "value": "2026-06-14T23:30:09.689117Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mobwfn6t2n27", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "659b8374-d9fe-45a7-93bb-e648042d63ab", "content": "Veeam released patches for CVE-2026-44963, a critical RCE flaw in Backup & Replication with a CVSS score of 9.4. Update now to avoid remote code execution risks. #CyberSecurity", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mobwfn6t2n27"}, {"timestamp": "2026-07-04T23:44:11.653Z", "date_only": false, "value": "2026-07-04T23:44:11.653954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuaj4xhfs2l", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "e9b70fe7-2342-450f-abb5-2eae833090cb", "content": "Veeam\u306e\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u6a29\u9650\u306e\u4f4e\u3044\u30e6\u30fc\u30b6\u30fc\u304c\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30b5\u30fc\u30d0\u30fc\u3092\u4e57\u3063\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\n\nVeeam\u306f\u3001Backup & Replication\u30d0\u30fc\u30b8\u30e7\u30f312.x\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u3001\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-44963\u3001CVSS v4\u30b9\u30b3\u30a29.4\uff09\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u6a29\u9650\u306e\u4f4e\u3044\u30c9\u30e1\u30a4\u30f3\u30e6\u30fc\u30b6\u30fc\u304cActive Directory\u30c9\u30e1\u30a4\u30f3\u306b\u63a5\u7d9a\u3055\u308c\u305f\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u3001\u30b7\u30b9\u30c6\u30e0\u5168\u4f53\u304c\u4fb5\u5bb3\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\n\n\u3053\u306e\u554f\u984c\u306f\u30d0\u30fc\u30b8\u30e7\u30f312.3.2.4854\u3067\u4fee\u6b63\u3055\u308c\u3066\u304a\u308a\u3001\u7570\u306a\u308b\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u3092\u4f7f...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuaj4xhfs2l"}, {"timestamp": "2026-07-05T00:51:24.615Z", "date_only": false, "value": "2026-07-05T00:51:24.615805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuebchhfk2l", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "d6b345f9-88dd-46da-889c-f172549da0dd", "content": "\u300cVeeam Backup & Replication\u300d\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30b5\u30fc\u30d0\u306bRCE\u8106\u5f31\u6027\n\nVeeam Software\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u88fd\u54c1\u300cVeeam Backup & Replication\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u63d0\u4f9b\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95936\u67089\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u8106\u5f31\u6027\u300cCVE-2026-44963\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u540c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u306b\u306f\u30c9\u30e1\u30a4\u30f3\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u6e08\u307f\u306e\u30e6\u30fc\u30b6\u30fc\u3067\u3042\u308b\u3053\u3068\u304c\u6761\u4ef6\u3068\u306a\u308b\u304c\u3001\u30c9\u30e1\u30a4\u30f3\u306b\u53c2\u52a0\u3057\u3066\u3044\u308b\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30b5\u30fc\u30d0\u306b\u304a\u3044\u3066\u3001\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuebchhfk2l"}, {"timestamp": "2026-07-13T10:18:53.878Z", "date_only": false, "value": "2026-07-13T10:18:53.878157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqjhpgomvz2r", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "96aabdaf-775a-4322-ab17-8ef329cc5240", "content": "A critical Veeam Backup vulnerability (CVE-2026-44963) allows remote code execution. Patch immediately to avoid ransomware targeting CVE-2023-27532.\n\n#Veeam #CVE202644963 #CyberSecurity #RCE #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mqjhpgomvz2r"}, {"timestamp": "2026-07-13T22:00:24.330Z", "date_only": false, "value": "2026-07-13T22:00:24.330445Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/89393", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "b0dc1c47-2982-484f-a6f4-bbce83f5eae9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44963\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SentinelXofficial\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 02:54:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetection scripts, patch checker & hardening guide for CVE-2026-44963 (Veeam B&R RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/89393"}, {"timestamp": "2026-07-14T01:00:04.541Z", "date_only": false, "value": "2026-07-14T01:00:04.541267Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3299", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "8dcb11ed-3e42-48c8-a1ce-968c1c9686cd", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Veeam Backup & Replication \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09346\nCVE-2026-44963\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.veeam.com/kb4869\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN);\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).", "url": "https://t.me/bdufstecru/3299"}, {"timestamp": "2026-07-15T01:14:13.390Z", "date_only": false, "value": "2026-07-15T01:14:13.390054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqnk77o2rk2c", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "7958f906-43a3-431c-b88f-7f88dd16a669", "content": "Veeam Backup & Replication\u306b\u91cd\u5927\u306aRCE \u8106\u5f31\u6027(CVE-2026-44963)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqnk77o2rk2c"}, {"timestamp": "2026-07-15T12:00:05.227Z", "date_only": false, "value": "2026-07-15T12:00:05.227190Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/9194", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "c2e1e0da-5d7d-4a02-91ff-b7da22dc5e5b", "content": "\ud83d\udea8 A single domain user could run code on your Veeam Backup Server.\n\nVeeam has patched a critical RCE flaw (CVE-2026-44963, CVSS 9.4) in Backup & Replication.\n\nAll v12 builds up to 12.3.2.4465 are affected. Fixed in 12.3.2.4854. v13.x is safe.\n\nPatch now: https://thehackernews.com/2026/06/veeam-backup-replication-rce-flaw-lets.html", "url": "https://t.me/thehackernews/9194"}, {"timestamp": "2026-07-16T00:00:09.766Z", "date_only": false, "value": "2026-07-16T00:00:09.766684Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/9194", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "4363eddb-aead-441c-8210-9defbf55ec50", "content": "\ud83d\udea8 A single domain user could run code on your Veeam Backup Server.\n\nVeeam has patched a critical RCE flaw (CVE-2026-44963, CVSS 9.4) in Backup & Replication.\n\nAll v12 builds up to 12.3.2.4465 are affected. Fixed in 12.3.2.4854. v13.x is safe.\n\nPatch now: https://thehackernews.com/2026/06/veeam-backup-replication-rce-flaw-lets.html", "url": "https://t.me/thehackernews/9194"}, {"timestamp": "2026-07-21T04:00:08.211Z", "date_only": false, "value": "2026-07-21T04:00:08.211729Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/infosec_ita_notizie/3027", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "b6694c53-f49f-44bd-b1f0-9fea83091335", "content": "\u2728 CVE-2026-44963: RCE critico su Veeam Backup & Replication \u2014 aggiornare subito a 12.3.2.4854\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-44963-rce-critico-su-veeam-backup-replication-aggiornare-subito-a-12-3-2-4854/", "url": "https://t.me/infosec_ita_notizie/3027"}, {"timestamp": "2026-07-23T09:10:00.113Z", "date_only": false, "value": "2026-07-23T09:10:00.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44963", "record": "FKIE_CVE-2026-44963", "field": "lastModified"}, {"timestamp": "2026-08-03T12:13:42.070Z", "date_only": false, "value": "2026-08-03T12:13:42.070281Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms6hvuw4gk2j", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "c2b95bd8-c3fa-4875-91ac-192b97f8c868", "content": "Veeam Backup\u306eBinaryFormatter\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\n\n\u65b0\u305f\u306b\u767a\u898b\u3055\u308c\u305f\u9006\u30b7\u30ea\u30a2\u30eb\u5316\u306e\u8106\u5f31\u6027\uff08CVE-2026-44963\uff09\u306f\u3001Veeam Backup & Replication\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30c9\u30e1\u30a4\u30f3\u30e6\u30fc\u30b6\u30fc\u306f\u3001BinaryFormatter\u306e\u51e6\u7406\u306b\u304a\u3051\u308b\u5f31\u70b9\u3092\u60aa\u7528\u3057\u3066\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\n\nSecureLayer7 Labs\u304c\u8a73\u7d30\u306b\u5831\u544a\u3057\u305f\u3053\u306e\u554f\u984c\u306f\u3001Veeam\u306e.NET Remoting\u653b\u6483\u5bfe\u8c61\u9818\u57df\u306b\u304a\u3051\u308b\u61f8\u5ff5\u3059\u3079\u304d\u6b20\u9665\u306e\u50be\u5411\u306e\u4e00\u90e8\u3067\u3042\u308a\u3001\u4e0d\u5341\u5206\u306a\u30d6\u30e9\u30c3...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms6hvuw4gk2j"}, {"timestamp": "2026-08-21T23:00:09.481Z", "date_only": false, "value": "2026-08-21T23:00:09.481434Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/1849", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "7e508e71-f998-4770-be6c-528f29a09344", "content": "\ud83d\udd34 Veeam Backup BinaryFormatter Flaw Enables Remote Code Execution\n\nA newly discovered deserialization vulnerability, tracked as CVE-2026-44963, affects Veeam Backup & Replication. This vulnerability allows authenticated domain users to execute remote code on backup servers by exploiting weaknesses in the handling of BinaryFormatter.\n\nThe issue, detailed by SecureLayer7 Labs, is part of a concerning trend of flaws in Veeam\u2019s .NET Remoting attack surface, where inadequate blacklist-based protections fail to prevent the exploitation of unsafe deserialization methods effectively.", "url": "https://t.me/pphm_HackerNews/1849"}, {"timestamp": "2026-08-21T23:00:11.065Z", "date_only": false, "value": "2026-08-21T23:00:11.065407Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/1708", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "a2a9af2b-653f-40cf-9069-b507cdb5e5d9", "content": "\ud83d\udd34 Alleged Unauthenticated RCE for Veeam Backup & Replication Advertised on Cybercrime Forum\n\nA threat actor is advertising what they claim is an unauthenticated SYSTEM-level remote code execution (RCE) affecting Veeam Backup & Replication 12.x.\n\n- According to the post, the alleged exploit:\n  * Claims to bypass the June 2026 patch for CVE-2026-44963\n  * Requires no authentication, credentials, or user interaction\n  * Allegedly grants NT AUTHORITY\\SYSTEM privileges\n  * Is said to affect all 12.x builds, including 12.3.2.4854\n  * Claims Veeam Backup & Replication 13.x is not affected due to architectural changes", "url": "https://t.me/pphm_HackerNews/1708"}, {"timestamp": "2026-08-23T00:00:42.093Z", "date_only": false, "value": "2026-08-23T00:00:42.093399Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/1708", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "6eeb8493-a728-470c-bb99-3d68543f2664", "content": "\ud83d\udd34 Alleged Unauthenticated RCE for Veeam Backup & Replication Advertised on Cybercrime Forum\n\nA threat actor is advertising what they claim is an unauthenticated SYSTEM-level remote code execution (RCE) affecting Veeam Backup & Replication 12.x.\n\n- According to the post, the alleged exploit:\n  * Claims to bypass the June 2026 patch for CVE-2026-44963\n  * Requires no authentication, credentials, or user interaction\n  * Allegedly grants NT AUTHORITY\\SYSTEM privileges\n  * Is said to affect all 12.x builds, including 12.3.2.4854\n  * Claims Veeam Backup & Replication 13.x is not affected due to architectural changes", "url": "https://t.me/pphm_HackerNews/1708"}, {"timestamp": "2026-08-29T20:00:13.071Z", "date_only": false, "value": "2026-08-29T20:00:13.071679Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1902", "record": "CVE-2026-44963", "field": "creation_timestamp", "uuid": "342ad357-4edc-4854-a882-6dba486b9f60", "content": "A single domain user could run code on your Veeam Backup Server.\n\nVeeam has patched a critical RCE flaw (CVE-2026-44963, CVSS 9.4) in Backup & Replication.\n\nAll v12 builds up to 12.3.2.4465 are affected. Fixed in 12.3.2.4854. v13.x is safe.", "url": "https://t.me/CyberDispatch/1902"}]}