Threat Intelligence / CVE / CVE-2024-40711

CVE-2024-40711

CISA KEVRansomware

CVSS 9.8 (CRITICAL) · EPSS 68.2% · Priority 10/10 · Published 2024-09-07

As of 2025-10-30, CVE-2024-40711 is a CVSS 9.8 (CRITICAL-severity) vulnerability. CISA KEV-listed (known exploited). EPSS exploitation probability 68.2%. Threadlinqs Intelligence tracks 1 threat exploiting it.

Last updated: 2025-10-30

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-502

Exploitation status

CISA KEV-listed (known exploited)

Threats tracking this CVE

AI-Augmented FortiGate Mass Exploitation — Russian-Speaking Actor Breaches 600+ Firewalls Across 55 Countries Using LLM-Generated Tooling and Custom MCP Framework — CRITICAL

References

Full detection coverage & IOCs for threats exploiting CVE-2024-40711 are available via the Threadlinqs MCP server (Purple tier). View plans →

← all vulnerabilities · Markdown version · Threadlinqs Intelligence

Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.