New Veeam vulnerability exposes backup servers to RCE attacks

Veeam released a patch for CVE-2026-44963, a critical remote code execution vulnerability in Veeam Backup and Replication 12.3.2.4465 and earlier 12.x builds. Any authenticated low-privilege domain user can exploit it on domain-joined servers. The fix is in version 12.3.2.4854. Version 13.x is not affected.