https://wingertries.net/Cybersecurity research, CTF writeups, pentesting notes and security experiments. 2026-06-18T20:04:32+10:00 Bijay Upreti https://wingertries.net/ Jekyll © 2026 Bijay Upreti /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-06-18T09:00:00+10:00 2026-06-18T19:59:00+10:00 https://wingertries.net/posts/veritas-backup-exec-rce-cve-2021-27876/ Bijay Upreti

During a recent engagement I ran into a Veritas Backup Exec Agent sitting on TCP/10000 with no authentication enforced. Three CVEs, one custom exploit script, and a SYSTEM shell — all without touching a single credential. This post breaks down why the vulnerability exists, how the chain works at the protocol level, and why I wrote a custom exploit rather than reaching for Metasploit. This w...