A vulnerability in the Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server due to a failure to properly validate TLS certificates. This issue enables remote code execution via a Man-in-the-Middle attack. Over 32,000 services are potentially affected. The vulnerability has been actively exploited.