{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/veeam-management-pack-for-microsoft-system-center--13.1.0.334/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:veeam:management_pack_for_microsoft_system_center:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2023-22793"},{"id":"CVE-2026-107238"},{"id":"CVE-2026-107239"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Veeam Management Pack for Microsoft System Center (\u003c 13.1.0.334)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","rce","enterprise-software"],"_cs_type":"advisory","_cs_vendors":["Veeam"],"content_html":"\u003cp\u003eMultiple vulnerabilities have been identified in Veeam Management Pack for Microsoft System Center. These vulnerabilities allow a remote attacker to execute arbitrary code. The affected versions are all releases prior to 13.1 (build 13.1.0.334). Organizations should refer to the vendor security bulletin KB4961 for patch guidance.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote arbitrary code execution, which may lead to full system compromise of the affected host.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Veeam Management Pack for Microsoft System Center to version 13.1 (build 13.1.0.334) or later immediately as per Veeam security bulletin KB4961.\u003c/li\u003e\n\u003cli\u003eReview network access logs for unusual inbound activity targeting the Veeam Management Pack service.\u003c/li\u003e\n\u003cli\u003eMonitor logs for unauthorized process execution spawned by service accounts associated with System Center or Veeam services.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-30T21:19:54Z","date_published":"2026-10-30T21:19:54Z","id":"https://feed.craftedsignal.io/briefs/2026-10-veeam-management-pack-vulns/","summary":"Multiple vulnerabilities in Veeam Management Pack for Microsoft System Center allow remote attackers to achieve arbitrary code execution on affected systems.","title":"Veeam Management Pack: Remote code execution vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-10-veeam-management-pack-vulns/"}],"language":"en","title":"CraftedSignal Threat Feed - Veeam Management Pack for Microsoft System Center (\u003c 13.1.0.334)","version":"https://jsonfeed.org/version/1.1"}