CVE-2023-22793

LOWCVSS 9.3 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked at 3 mentions on most recent observed day (2026-10-30)
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-10-29: 1Mentions · 2026-10-30: 310-2910-30
Referenced assets4 URLs
Full discourse4 posts
  • cve.now@cvedotnow

    🔴 remote code execution in virtualization extensions (CVE-2023-22793) An unauthenticated attacker can run arbitrary code on affected servers, potentially gaining full control of them. Patch → 13.1.0.334 https://cve.now/CVE-2023-22793

    120991.8K
    8.2K followersView on X
  • VulniPulse@vulnipulse

    CVE advisory: CVE-2023-22793 - veeam: Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1. https://vulnipulse.com/advisories/veeam-kb4961 #CVE #CyberSecurity #Veeam

    1000026
    37 followersView on X
  • ♫Why♥Not♪@Python_s_

    #NØØT_Security_Alerts 🚨 #ALERT — Critical Unauthenticated RCE in Veeam Management Pack October 29, 2026 PRODUCT: Veeam Management Pack for Microsoft System Center. CVE: CVE-2023-22793 SEVERITY: CRITICAL — CVSS 9.3 (v4.0). AFFECTED: Version 9.1 and earlier 9.x builds, including the Veeam Backup & Replication 13 compatibility patch. IMPACT: An unauthenticated remote attacker may execute arbitrary code on servers running the Veeam Virtualization Extensions service. EXPLOITATION STATUS: Vendor-confirmed vulnerability discovered during internal testing. Exploitation in the wild is not independently confirmed. DISCLOSURE: October 29, 2026, despite the CVE’s 2023 identifier. FORENSIC TRIAGE: Investigate unexpected service activity, suspicious child processes and unauthorized network connections. URGENT ACTION: Upgrade to Veeam Management Pack 13.1 (build 13.1.0.334). Version 9.x will not receive a fix. Restrict network exposure. SOURCE: https://www.veeam.com/kb4961 CONFIDENCE: HIGH — Dated, original Veeam security advisory with confirmed affected builds and remediation. #Veeam #RCE #VulnerabilityAlert #CyberSecurity #InfoSec

    0000021
    231 followersView on X
  • Daily CyberSecurity@Daily_CyberSec

    Veeam fixes seven vulnerabilities in Veeam Backup for Microsoft 365 and Management Pack, including RCE flaws CVE-2023-22793 and CVE-2026-106076. #Veeam #VeeamBackup #Microsoft365 #SystemCenter #RCE #CVE202322793 #BackupSecurity #PatchNow https://securityonline.info/veeam-vulnerabilities-microsoft-365-management-pack/

    00000239
    13.1K followersView on X

Explore more