← ExploitWatch
HomeExploited Vulnerabilities

CVE-2024-40711 — Actively Exploited: Backup & Replication (Veeam)

Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.

CVE IDCVE-2024-40711
VendorVeeam
ProductBackup & Replication
Vulnerability nameVeeam Backup and Replication Deserialization Vulnerability
Date added2024-10-17
Remediation due2024-11-07
Known ransomware useKnown
Required actionApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
DescriptionVeeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →