Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Veeam: actively exploited vulnerabilities

4 vulnerabilities in Veeam products (Backup & Replication) are in CISA’s catalog of exploited vulnerabilities. Last added: October 17, 2024.

Veeam security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Veeam category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Backup & Replication 4 vulnerabilities · Backup and NAS

Name used by CISA: Veeam. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Veeam list.

  1. Rank 1Veeam Backup & Replication

    CVE-2024-40711

    Ransomware

    Veeam Backup and Replication Deserialization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 17, 2024
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Veeam Backup & Replication

    CVE-2022-26501

    Ransomware

    Veeam Backup & Replication Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 13, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Veeam Backup & Replication

    CVE-2022-26500

    Ransomware

    Veeam Backup & Replication Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 13, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  4. Rank 4Veeam Backup & Replication

    CVE-2023-27532

    Ransomware

    Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 22, 2023
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.