CVE-2026-44963 | defend.network

What is CVE-2026-44963?

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

CVSS9.4 NVD 4.0

SeverityCRITICAL

ExploitationNo exploitation reported

EPSS2% · P83

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWECWE-502

NVD published2026-06-09

NVD last modified2026-07-23

Timeline

2026-06-09Published to the U.S. National Vulnerability Database (NVD)
2026-06-10First covered in a defend.network daily briefing
2026-07-23NVD record last updated

Affected product

See advisory

Remediation Steps

Apply the latest security patch from Veeam for Backup & Replication
Restrict Backup Server access to authenticated domain users only
Monitor backup server logs for suspicious authentication and code execution activity
Isolate affected backup servers from untrusted network segments until patched

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 2 of June 2026 (June 8 – 14)
Microsoft 200-patch record, Veeam RCE critical, GitHub supply-chain worm ongoing (2026-06-10)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.