{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T20:45:43.249Z",
  "tag": {
    "id": "veeam",
    "label": "Veeam",
    "isStack": false,
    "url": "https://pwn.watch/t/veeam",
    "feed": "https://pwn.watch/t/veeam/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "veeam-backup-replication-cve-2024-40711",
      "title": "Veeam Backup and Replication Deserialization",
      "url": "https://pwn.watch/i/veeam-backup-replication-cve-2024-40711",
      "json": "https://pwn.watch/i/veeam-backup-replication-cve-2024-40711.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Veeam Backup & Replication",
      "tags": [
        "veeam",
        "cisa-kev",
        "ransomware",
        "rce"
      ],
      "cveIds": [
        "CVE-2024-40711"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-09-07",
      "closedAt": "2024-10-17",
      "updatedAt": "2024-10-17",
      "summary": "Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. Added to the CISA KEV catalog on 2024-10-17. CISA lists known use in ransomware campaigns.",
      "xPost": null
    },
    {
      "slug": "veeam-backup-replication-cve-2023-27532",
      "title": "Veeam Backup & Replication: Cloud Connect Missing Authentication for Critical Function (CVE-2023-27532)",
      "url": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532",
      "json": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Veeam Backup & Replication",
      "tags": [
        "veeam",
        "ransomware",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2023-27532"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-08-22",
      "closedAt": "2023-08-22",
      "updatedAt": "2023-08-22",
      "summary": "Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts. Added to CISA KEV on 2023-08-22. CISA lists known use in ransomware campaigns.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "veeam-backup-replication-cve-2024-40711",
      "incidentTitle": "Veeam Backup and Replication Deserialization",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-10-17",
      "title": "CISA added CVE-2024-40711 to the KEV catalog (federal deadline 2024-11-07)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/veeam-backup-replication-cve-2024-40711"
    },
    {
      "incident": "veeam-backup-replication-cve-2024-40711",
      "incidentTitle": "Veeam Backup and Replication Deserialization",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-09-07",
      "title": "CVE-2024-40711 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-40711",
      "url": "https://pwn.watch/i/veeam-backup-replication-cve-2024-40711"
    },
    {
      "incident": "veeam-backup-replication-cve-2023-27532",
      "incidentTitle": "Veeam Backup & Replication: Cloud Connect Missing Authentication for Critical Function (CVE-2023-27532)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-08-22",
      "title": "CISA added CVE-2023-27532 to the KEV catalog (due 2023-09-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532"
    }
  ]
}