CVE-2024-40711Used in ransomware
Veeam Backup & Replication
Veeam Backup and Replication Deserialization Vulnerability
What it is
Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Veeam entries on the list
- Backup & Replication Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability CVE-2023-27532 · Aug 22, 2023
- Backup & Replication Veeam Backup & Replication Remote Code Execution Vulnerability CVE-2022-26501 · Dec 13, 2022
- Backup & Replication Veeam Backup & Replication Remote Code Execution Vulnerability CVE-2022-26500 · Dec 13, 2022