← KEV catalog
CISA known exploited vulnerability

CVE-2024-40711

Veeam Backup and Replication Deserialization Vulnerability

SOURCE FACT

Veeam · Backup & Replication

Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA notes

https://www.veeam.com/kb4649 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40711

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?