CVE-2024-40710 | BDVDB-2026-247666 Detail

Description#

A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive information (savedcredentials and passwords). Exploiting these vulnerabilities requires a user who has been assigned a low-privileged role within Veeam Backup & Replication.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-09-07Record published in the CVE List.
2. Version 22024-09-09Most recent update recorded in the CVE List.