Exploited vulnerabilities

Veeam

4 Veeam vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue4
Last 12 months0
In ransomware campaigns4
Last addition17 October 2024

The vulnerabilities4

  1. 17 October 2024CVE-2024-40711Backup & ReplicationVeeam Backup and Replication Deserialization VulnerabilityRansomware
  2. 22 August 2023CVE-2023-27532Backup & ReplicationVeeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityRansomware
  3. 13 December 2022CVE-2022-26501Backup & ReplicationVeeam Backup & Replication Remote Code Execution VulnerabilityRansomware
  4. 13 December 2022CVE-2022-26500Backup & ReplicationVeeam Backup & Replication Remote Code Execution VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Veeam included.

All vendorsThe catalogue on the CISA website