← Back to browse · API

CVE-2024-29855

Severity
CRITICAL
CVSS
9.0
EPSS
0.21634
Risk score
43.57
CISA KEV
No
PoC
No
Published
2024-06-11
Modified
2025-03-27
First seen
2026-08-07
Aliases
EUVD-2024-26847, GHSA-VFMF-3VR6-J85G
Products
Veeam:Recovery Orchestrator 7.0.0.379 <7.0.0.379, Veeam:Recovery Orchestrator 7.1.0.230 <7.1.0.230
Sources
euvd EUVD-2024-26847

Description

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

References