Brand
Veeam: actively exploited vulnerabilities
4 vulnerabilities in Veeam products (Backup & Replication) are in CISA’s catalog of exploited vulnerabilities. Last added: October 17, 2024.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
0 vulnerabilities added in the last 12 months
-
4 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Veeam category to your radar, or open its page.
- Backup, storage and NAS 4 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Backup & Replication4 vulnerabilities, Backup and NAS
Name used by CISA: Veeam. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Veeam list.
- Rank 1
Veeam Backup & ReplicationCVE-2024-40711
Veeam Backup and Replication Deserialization Vulnerability
Ransomware
CVSS severity 9.8critical
Added Oct 17, 2024
- Rank 2
Veeam Backup & ReplicationCVE-2022-26501
Veeam Backup & Replication Remote Code Execution Vulnerability
Ransomware
CVSS severity 9.8critical
Added Dec 13, 2022
- Rank 3
Veeam Backup & ReplicationCVE-2022-26500
Veeam Backup & Replication Remote Code Execution Vulnerability
Ransomware
CVSS severity 8.8high
Added Dec 13, 2022
- Rank 4
Veeam Backup & ReplicationCVE-2023-27532
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Ransomware
CVSS severity 7.5high
Added Aug 22, 2023
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.