Veeam Backup and Replication Deserialization Vulnerability

概要

参考情報

• veeam.com/kb4649 · Vendor Advisory
• labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-40711

veeam backup & replication のその他の脆弱性

• CVE-2026-21708緊急 9.9A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
• CVE-2026-21671緊急 9.1A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabilit…
• CVE-2026-21670中 6.5A vulnerability allowing a low-privileged user to extract saved SSH credentials.
• CVE-2026-21669緊急 9.9A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
• CVE-2026-21668中 6.5A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.