CVE-2024-39714

CVE-2024-39714 is a critical code injection vulnerability affecting Veeam Service Provider Console (VSPC) that allows a low-privileged user to upload arbitrary files, leading to remote code execution on the server. With a CVSS score of 9.9, this flaw presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While there is no public exploit code or active exploitation confirmed in the KEV catalog, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.