CVE-2024-40711Vulnerability

Veeam Backup and Replication Deserialization Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 17 Oct 2024.

Reported by 2 independent sources · first reported 20 Oct 2026 by CISA advisories · last reported 22 Oct 2026

Last reported 2 days ago

CISA KEVAdded 17 Oct 2024
Fix due 7 Nov 2024
Used by ransomware: knownCISA KEV catalogue

EPSS90.4%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026

What the reports say

2 reports, newest first · the exact sentence from each

“…tation of known security flaws in edge device products and internet-exposed products (CVE-2020-3259, CVE-2023-20269, CVE-2023-27532, CVE-2024-40711, and CVE-2024-40766) or, alternatively, credential exposure and brute-force password attacks, for initial access, followed by persis…”

The Hacker NewsNews22 Oct 2026
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
“CVE-2024-40711 [CWE-502: Deserialization of Untrusted Data]”

CISA advisoriesGovernment20 Oct 2026
#StopRansomware: SafePay Ransomware

Indicators reported together

named in the same reports

173.194.194[.]94in 1 report
a0dc80a37eb7e271…ed228d9ff526in 1 report
bbdd3620a67aedec…02a6f4bc6f41in 1 report
119.13.79[.]145in 1 report
210.242.76[.]32in 1 report
211.20.144[.]116in 1 report

Copy these 6 indicators · defanged

6 indicators, defanged, one per line

173.194.194[.]94
a0dc80a37eb7e2716c02a94adc8df9baedec192a77bde31669faed228d9ff526
bbdd3620a67aedec4b9a68b2c9cc880b6631215e129816aea19902a6f4bc6f41
119.13.79[.]145
210.242.76[.]32
211.20.144[.]116

Also named with it: CVE-2024-40766, CVE-2023-27532, CVE-2020-3259, CVE-2023-20269, CVE-2024-4577, CVE-2022-47945, CVE-2021-41773, CVE-2026-107186, CVE-2026-107187, CVE-2026-107188

Thanks — we review every report.

Report a wrong value