Unrated severityCISA KEVNVD Advisory· Published Sep 7, 2024· Updated Oct 21, 2025
CVE-2024-40711
CVE-2024-40711
Description
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Veeam/Backup and Recoveryv5Range: 12.1.2
Patches
Vulnerability mechanics
References
1- www.veeam.com/kb4649mitre
News mentions
1- New Veeam vulnerability exposes backup servers to RCE attacksBleepingComputer · Jun 9, 2026