Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Veeam Releases Security Advisory for Critical Vulnerability in Backup & Replication

CVE‑2026‑44963 allows authenticated attackers to execute remote code on Veeam Backup & Replication servers.

Threat ID:
CC-4794
Threat Severity:
Medium
Published:
9 June 2026 1:52 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

CVE‑2026‑44963 allows authenticated attackers to execute remote code on Veeam Backup & Replication servers.

Threat details

Introduction

Veeam has released a security advisory to address a critical vulnerability in Veeam Backup & Replication. Successful exploitation could allow a remote authenticated attacker with domain user privileges to execute remote code on affected backup servers.

  • CVE-2026-44963 - Remote code execution vulnerability - CVSSv4 Base Score: 9.4

Remediation advice

Affected organisations are encouraged to review Veeam advisory KB4869 and apply the relevant update as soon as possible.

Definitive source of threat updates

Last edited: 9 June 2026 1:52 pm