CVE-2024-40711 - Veeam Backup and Replication Deserialization Vulnerability
Project:Veeam
Product:Backup & Replication
Date Added:2024-10-17Due Date:2024-11-07
Vulnerability Name
Veeam Backup and Replication Deserialization Vulnerability
Description
Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.
Known To Be Used in Ransomware Campaigns?
Known
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://www.veeam.com/kb4649
https://nvd.nist.gov/vuln/detail/CVE-2024-40711
Related News Articles
New Veeam vulnerability exposes backup servers to RCE attacksJune 9, 2026
Amazon: AI-assisted hacker breached 600 Fortinet firewalls in 5 weeksFebruary 21, 2026
AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 CountriesFebruary 21, 2026
New Veeam vulnerabilities expose backup servers to RCE attacksJanuary 7, 2026
New Veeam RCE flaw lets domain users hack backup serversJune 17, 2025