PULSEUnderground Intel

LIVE20signals / 24h

FEED

ransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technologyransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technology

CVE Watch—

CVE-2024-40711

Veeam Backup and Replication Deserialization Vulnerability

CVSS

—

No CVSS

EPSS

90.4%

p100

KEV

YES

Oct 17, 2024

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

90.4%EPSS · 30 days90.4%

2026-09-162026-10-14

KEV catalog record

Product

Veeam / Backup & Replication

Vulnerability

Veeam Backup and Replication Deserialization Vulnerability

Added to KEV

Oct 17, 2024

Remediate by

Nov 7, 2024

Known ransomware use

Yes

Summary description

Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.veeam.com/kb4649 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40711

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-27532—

KEV—80Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability—CVE-2022-26500—

KEV—78Veeam Backup & Replication Remote Code Execution Vulnerability—CVE-2022-26501—

KEV—77Veeam Backup & Replication Remote Code Execution Vulnerability—