{"uuid": "e353cfae-a6ab-4527-b8f8-b1928c1e5d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/pphm_HackerNews/1708", "content": "\ud83d\udd34 Alleged Unauthenticated RCE for Veeam Backup & Replication Advertised on Cybercrime Forum\n\nA threat actor is advertising what they claim is an unauthenticated SYSTEM-level remote code execution (RCE) affecting Veeam Backup & Replication 12.x.\n\n- According to the post, the alleged exploit:\n  * Claims to bypass the June 2026 patch for CVE-2026-44963\n  * Requires no authentication, credentials, or user interaction\n  * Allegedly grants NT AUTHORITY\\SYSTEM privileges\n  * Is said to affect all 12.x builds, including 12.3.2.4854\n  * Claims Veeam Backup & Replication 13.x is not affected due to architectural changes", "creation_timestamp": "2026-08-22T00:00:27.234468Z"}