CVE-2021-35971: Veeam Backup & Replication

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting.

Affected products

• Veeam Veeam Backup & Replication: from 10.0, before 10.0.1.4854 (fixed in 10.0.1.4854); from 11.0, before 11.0.0.837 (fixed in 11.0.0.837)

Published 2021-06-30. Last modified 2026-06-17.