Início / CVEs
Vulnerabilidades exploradas (CISA KEV)
CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.
CVE-2024-40711
Crítica · 9.8
KEV Urgente · 83 Exploit público Ransomware CWE-502 07/09/2024
Veeam Backup and Replication Deserialization Vulnerability
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
CVE-2023-27532
Alta · 7.5
KEV Urgente · 75 Exploit público Ransomware CWE-306 10/03/2023
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
CVE-2022-26501
Crítica · 9.8
KEV Urgente · 72 Ransomware CWE-306 17/03/2022
Veeam Backup & Replication Remote Code Execution Vulnerability
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
CVE-2022-26500
Alta · 8.8
KEV Alta · 65 Ransomware CWE-22 17/03/2022
Veeam Backup & Replication Remote Code Execution Vulnerability
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.