The issues allow low-privileged domain users and a Backup Viewer role to execute code on backup servers.
Part of the PlainSec briefing for 2026-03-14