CVE-2024-48248

🗓️ 04 Mar 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 246 Views

CVE-2024-48248 exposes absolute path traversal risk in NAKIVO Backup & Replication, risking remote code execution.

Reporter	Title	Published	Views	Family All 20
attackerkb	CVE-2024-48248	4 Mar 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of the web interface of NAKIVO Backup and Replication systems for virtual machines allows a perpetrator to disclose protected information.	5 Mar 202500:00	–	bdu_fstec
GithubExploit	Exploit for Absolute Path Traversal in Nakivo Backup_\&_Replication_Director	28 Jan 202504:46	–	githubexploit
Circl	CVE-2024-48248	26 Feb 202511:22	–	circl
CISA KEV Catalog	NAKIVO Backup and Replication Absolute Path Traversal Vulnerability	19 Mar 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	19 Mar 202512:00	–	cisa
CNNVD	Nakivo Backup & Replication 安全漏洞	4 Mar 202500:00	–	cnnvd
Cvelist	CVE-2024-48248	4 Mar 202500:00	–	cvelist
Kitploit	nakivo-arbitrary-file-read-poc-CVE-2024-48248	8 Oct 202613:09	–	kitploit
Nuclei	NAKIVO Backup and Replication Solution - Unauthenticated Arbitrary File Read	27 Sep 202602:09	–	nuclei

NVD

Vulners

CNA

Node

nakivo backup_&_replication_directorRange<11.0.0.88174

[
  {
    "defaultStatus": "unaffected",
    "product": "Backup & Replication Director",
    "vendor": "NAKIVO",
    "versions": [
      {
        "lessThan": "11.0.0.88174",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
labs	www.labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/
helpcenter	www.helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
github	www.github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248/

24 Sep 2026 13:10Current

8.5High risk

Vulners AI Score8.5

CVSS 3.18.6

EPSS0.94356

SSVC

cve-2024-48248 absolute path traversal nakivo backup & replication remote code execution