https://vulnerability.circl.lu/sightings/feed 2026-09-07T15:40:30.986483+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e0879d13-89c4-412b-8ff0-8496da447af6/export 2026-09-07T15:40:31.010812+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e0879d13-89c4-412b-8ff0-8496da447af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/CyberDispatch/1902", "content": "A single domain user could run code on your Veeam Backup Server.\n\nVeeam has patched a critical RCE flaw (CVE-2026-44963, CVSS 9.4) in Backup & Replication.\n\nAll v12 builds up to 12.3.2.4465 are affected. Fixed in 12.3.2.4854. v13.x is safe.", "creation_timestamp": "2026-08-31T00:00:39.294980Z"} 2026-08-31T00:00:39.294980+00:00 https://vulnerability.circl.lu/sighting/7b41d31b-c594-4ec3-86b9-861ceda22eb6/export 2026-09-07T15:40:31.013746+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7b41d31b-c594-4ec3-86b9-861ceda22eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/CyberDispatch/1902", "content": "A single domain user could run code on your Veeam Backup Server.\n\nVeeam has patched a critical RCE flaw (CVE-2026-44963, CVSS 9.4) in Backup & Replication.\n\nAll v12 builds up to 12.3.2.4465 are affected. Fixed in 12.3.2.4854. v13.x is safe.", "creation_timestamp": "2026-08-30T00:00:39.716584Z"} 2026-08-30T00:00:39.716584+00:00 https://vulnerability.circl.lu/sighting/342ad357-4edc-4854-a882-6dba486b9f60/export 2026-09-07T15:40:31.014001+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "342ad357-4edc-4854-a882-6dba486b9f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/CyberDispatch/1902", "content": "A single domain user could run code on your Veeam Backup Server.\n\nVeeam has patched a critical RCE flaw (CVE-2026-44963, CVSS 9.4) in Backup & Replication.\n\nAll v12 builds up to 12.3.2.4465 are affected. Fixed in 12.3.2.4854. v13.x is safe.", "creation_timestamp": "2026-08-29T20:00:13.071679Z"} 2026-08-29T20:00:13.071679+00:00 https://vulnerability.circl.lu/sighting/e7b9487f-06ad-4ee1-8944-d23a12517d5e/export 2026-09-07T15:40:31.014122+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e7b9487f-06ad-4ee1-8944-d23a12517d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/pphm_HackerNews/1849", "content": "\ud83d\udd34 Veeam Backup BinaryFormatter Flaw Enables Remote Code Execution\n\nA newly discovered deserialization vulnerability, tracked as CVE-2026-44963, affects Veeam Backup & Replication. This vulnerability allows authenticated domain users to execute remote code on backup servers by exploiting weaknesses in the handling of BinaryFormatter.\n\nThe issue, detailed by SecureLayer7 Labs, is part of a concerning trend of flaws in Veeam\u2019s .NET Remoting attack surface, where inadequate blacklist-based protections fail to prevent the exploitation of unsafe deserialization methods effectively.", "creation_timestamp": "2026-08-23T00:00:43.367707Z"} 2026-08-23T00:00:43.367707+00:00 https://vulnerability.circl.lu/sighting/6eeb8493-a728-470c-bb99-3d68543f2664/export 2026-09-07T15:40:31.014225+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6eeb8493-a728-470c-bb99-3d68543f2664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1708", "content": "\ud83d\udd34 Alleged Unauthenticated RCE for Veeam Backup & Replication Advertised on Cybercrime Forum\n\nA threat actor is advertising what they claim is an unauthenticated SYSTEM-level remote code execution (RCE) affecting Veeam Backup & Replication 12.x.\n\n- According to the post, the alleged exploit:\n * Claims to bypass the June 2026 patch for CVE-2026-44963\n * Requires no authentication, credentials, or user interaction\n * Allegedly grants NT AUTHORITY\\SYSTEM privileges\n * Is said to affect all 12.x builds, including 12.3.2.4854\n * Claims Veeam Backup & Replication 13.x is not affected due to architectural changes", "creation_timestamp": "2026-08-23T00:00:42.093399Z"} 2026-08-23T00:00:42.093399+00:00 https://vulnerability.circl.lu/sighting/e353cfae-a6ab-4527-b8f8-b1928c1e5d59/export 2026-09-07T15:40:31.014327+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e353cfae-a6ab-4527-b8f8-b1928c1e5d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/pphm_HackerNews/1708", "content": "\ud83d\udd34 Alleged Unauthenticated RCE for Veeam Backup & Replication Advertised on Cybercrime Forum\n\nA threat actor is advertising what they claim is an unauthenticated SYSTEM-level remote code execution (RCE) affecting Veeam Backup & Replication 12.x.\n\n- According to the post, the alleged exploit:\n * Claims to bypass the June 2026 patch for CVE-2026-44963\n * Requires no authentication, credentials, or user interaction\n * Allegedly grants NT AUTHORITY\\SYSTEM privileges\n * Is said to affect all 12.x builds, including 12.3.2.4854\n * Claims Veeam Backup & Replication 13.x is not affected due to architectural changes", "creation_timestamp": "2026-08-22T00:00:27.234468Z"} 2026-08-22T00:00:27.234468+00:00 https://vulnerability.circl.lu/sighting/6093505c-c3d2-47bd-93fd-a37271be6c11/export 2026-09-07T15:40:31.014430+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6093505c-c3d2-47bd-93fd-a37271be6c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/pphm_HackerNews/1849", "content": "\ud83d\udd34 Veeam Backup BinaryFormatter Flaw Enables Remote Code Execution\n\nA newly discovered deserialization vulnerability, tracked as CVE-2026-44963, affects Veeam Backup & Replication. This vulnerability allows authenticated domain users to execute remote code on backup servers by exploiting weaknesses in the handling of BinaryFormatter.\n\nThe issue, detailed by SecureLayer7 Labs, is part of a concerning trend of flaws in Veeam\u2019s .NET Remoting attack surface, where inadequate blacklist-based protections fail to prevent the exploitation of unsafe deserialization methods effectively.", "creation_timestamp": "2026-08-22T00:00:26.662517Z"} 2026-08-22T00:00:26.662517+00:00 https://vulnerability.circl.lu/sighting/a2a9af2b-653f-40cf-9069-b507cdb5e5d9/export 2026-09-07T15:40:31.014535+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a2a9af2b-653f-40cf-9069-b507cdb5e5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/pphm_HackerNews/1708", "content": "\ud83d\udd34 Alleged Unauthenticated RCE for Veeam Backup & Replication Advertised on Cybercrime Forum\n\nA threat actor is advertising what they claim is an unauthenticated SYSTEM-level remote code execution (RCE) affecting Veeam Backup & Replication 12.x.\n\n- According to the post, the alleged exploit:\n * Claims to bypass the June 2026 patch for CVE-2026-44963\n * Requires no authentication, credentials, or user interaction\n * Allegedly grants NT AUTHORITY\\SYSTEM privileges\n * Is said to affect all 12.x builds, including 12.3.2.4854\n * Claims Veeam Backup & Replication 13.x is not affected due to architectural changes", "creation_timestamp": "2026-08-21T23:00:11.065407Z"} 2026-08-21T23:00:11.065407+00:00 https://vulnerability.circl.lu/sighting/7e508e71-f998-4770-be6c-528f29a09344/export 2026-09-07T15:40:31.014641+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7e508e71-f998-4770-be6c-528f29a09344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44963", "type": "seen", "source": "https://t.me/pphm_HackerNews/1849", "content": "\ud83d\udd34 Veeam Backup BinaryFormatter Flaw Enables Remote Code Execution\n\nA newly discovered deserialization vulnerability, tracked as CVE-2026-44963, affects Veeam Backup & Replication. This vulnerability allows authenticated domain users to execute remote code on backup servers by exploiting weaknesses in the handling of BinaryFormatter.\n\nThe issue, detailed by SecureLayer7 Labs, is part of a concerning trend of flaws in Veeam\u2019s .NET Remoting attack surface, where inadequate blacklist-based protections fail to prevent the exploitation of unsafe deserialization methods effectively.", "creation_timestamp": "2026-08-21T23:00:09.481434Z"} 2026-08-21T23:00:09.481434+00:00 https://vulnerability.circl.lu/sighting/a2365307-1df0-4d0a-910a-888c3c54a5dc/export 2026-09-07T15:40:31.014738+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a2365307-1df0-4d0a-910a-888c3c54a5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44966", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3msqq3uaroq2i", "content": "A critical-severity fix just shipped for Shepherdwind Velocity.Js. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-44966", "creation_timestamp": "2026-08-10T18:28:01.799864Z"} 2026-08-10T18:28:01.799864+00:00