Veeam Backup and Replication Deserialization Vulnerability

Mô tả

Tham khảo

• veeam.com/kb4649 · Vendor Advisory
• labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-40711

Lỗ hổng khác của veeam backup & replication

• CVE-2026-21708NGHIÊM TRỌNG 9.9A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
• CVE-2026-21671NGHIÊM TRỌNG 9.1A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availabilit…
• CVE-2026-21670TRUNG BÌNH 6.5A vulnerability allowing a low-privileged user to extract saved SSH credentials.
• CVE-2026-21669NGHIÊM TRỌNG 9.9A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
• CVE-2026-21668TRUNG BÌNH 6.5A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.