CVE-2024-40711: Veeam Backup and Replication Deserialization Vulnerability.
Veeam Backup and Replication Deserialization Vulnerability. Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.
- CISA KEV-listed (remediation due 2024-11-07)
- used in ransomware campaigns
- EPSS 70.5% (98.7% percentile)