CVE-2023-22793: Critical severity vulnerability
Published Oct 29, 2026
·Updated
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.
Event History
Oct 29, 2026
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionWeakness
Data Sourced
via NVD·11:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which systems are exposed to this issue?
Servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center are exposed.
2
Does exploitation require credentials or user interaction?
No. The vulnerability allows an unauthenticated attacker to execute code remotely, and the supplied vector indicates no user interaction is required.
3
What could a successful attacker do?
A successful exploit could result in remote code execution on the affected server, with high impact to confidentiality, integrity, and availability.