For those of you running Veeam, a 9.9 severity has been announced - eviltoast

Luckily the RCE only works if the device is domain joined which is against Veeams Best Practices.