Home / CVEs
Exploited vulnerabilities (CISA KEV)
CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.
CVE-2024-40711
Critical · 9.8
KEV Urgent · 83 Public exploit Ransomware CWE-502 Sep 7, 2024
Veeam Backup and Replication Deserialization Vulnerability
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
CVE-2023-27532
High · 7.5
KEV Urgent · 75 Public exploit Ransomware CWE-306 Mar 10, 2023
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
CVE-2022-26501
Critical · 9.8
KEV Urgent · 72 Ransomware CWE-306 Mar 17, 2022
Veeam Backup & Replication Remote Code Execution Vulnerability
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
CVE-2022-26500
High · 8.8
KEV High · 65 Ransomware CWE-22 Mar 17, 2022
Veeam Backup & Replication Remote Code Execution Vulnerability
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.