CVE-2023-22793
EPSS 0.5%Recent vendor advisory, urgent patching signal, CVSS confirms severity; KEV absence and no confirmed wild exploitation moderate score.
What: Unauthenticated remote code execution in Veeam Management Pack for Microsoft System Center's Virtualization Extensions service; affects backup and System Center deployments.
Why it matters: Published just yesterday (Oct 29, 2026), this Veeam advisory addresses multiple RCE flaws including CVE-2023-22793 with CVSS 9.3 CRITICAL severity. Social posts cite vendor patches and urgent mitigation. Not yet KEV-listed, but rapid vendor response and high CVSS indicate active patch readiness by defenders.
Where it's seen: Veeam security advisory, aggregated across Bluesky with "#PatchNow" urgency; CVSS score circulating; defenders scanning for affected deployments.
RISK: CRITICAL — Unauthenticated RCE, CVSS 9.3, vendor patching, broad Veeam/Microsoft install base exposed.
Description
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.