Latest remote code execution news

Four CVSS 9.9 flaws hit Veeam Backup and Replication, letting domain users run code on backup servers. The March 13 vulnerability digest covers eight Veeam patches, a Tolgee XXE, and a TP-Link command injection.

Four CVSS 9.9 remote code execution flaws patched in Veeam Backup and Replication. Authenticated domain users could run arbitrary code on backup servers. Past Veeam vulnerabilities were weaponized by Akira, Fog, and Frag ransomware within weeks of disclosure.