CVE

CVE-2024-40711

P1⬤ KNOWN RANSOMWARE USE

Veeam Backup and Replication Deserialization Vulnerability

Veeam · Backup & Replication

Date added (CISA)

2024-10-17

Remediation due

2024-11-07

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.