CVE-2024-40714

8.3 highEPSS 0.4%

High (8.3) in veeam veeam backup \& replication. EPSS 0.4% chance of exploitation in the next 30 days.

An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations.

Severity

CVSS 3.1

8.3 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2024-09-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veeam:veeam_backup_\&_replication

References

https://www.veeam.com/kb4649

Check your stack JSON