Unauthenticated RCE in Veeam Virtualization Extensions Service
CVE-2023-22793 Published on October 29, 2026

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.

NVD

Weakness Type

What is a Marshaling, Unmarshaling Vulnerability?

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

CVE-2023-22793 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.


Affected Versions

Veeam Management Pack for Microsoft System Center:

Exploit Probability

EPSS
0.53%
Percentile
44.57%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.