Authenticated RCE in Backup Server via Domain User

Publication date: 2026-06-09

Last updated on: 2026-06-09

Assigner: HackerOne

Description

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-06-09

Generated

2026-06-30

AI Q&A

2026-06-10

EPSS Evaluated

2026-06-28

NVD

CVE-2026-44963

EUVD

EUVD-2026-35868

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated domain user to execute remote code on the Backup Server.

Impact Analysis

An attacker who is an authenticated domain user could exploit this vulnerability to run arbitrary code remotely on the Backup Server, potentially leading to full control over the server and compromising backup data.

Hi! I’m here to help you understand CVE-2026-44963. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70