14741 matches found
CVE-2026-55410
NocoBase (with the @nocobase/plugin-backups) prior to version 2.1.19 is vulnerable. The backups restoration flow interpolates database.schema from _metadata.json into Node.js child_process.exec() shell commands, enabling a backup-management user to execute arbitrary commands with the NocoBase ser...
PT-2026-60340
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2026-50406
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-50364
Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...
CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-50406
CVE-2026-50406 affects Windows Backup Engine with a use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Connected sources confirm the issue exists in Windows Backup Engine and describe local privilege escalation as the impact, with Microsoft issuing u...
CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-50364 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-50364
Technical details (affected product/version, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-50364 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-60114
Sustainable Irrigation Platform SIP through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files with unvalidated keys used to construct file paths...
CVE-2026-60114
SIP 5.x (up to 5.2.16) contains a path traversal flaw in the Backup/Restore function. Unvalidated keys in the JSON backup enable attackers with restore access to craft file paths and write JSON files outside the data directory. The issue is worse when the optional passphrase is not enabled (facto...
Windows Backup Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...
Windows Backup Engine Elevation of Privilege Vulnerability
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
PT-2026-60596
Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description A race condition occurs in the Windows Backup Engine due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges local...
PT-2026-58203
Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...
SIP Sustainable Irrigation Platform 5.x Path Traversal in Backup/Restore
Summary SIP is a free Raspberry Pi based Python program for controlling irrigation systems sprinkler, drip, hydroponic, etc. It uses web technology to provide an intuitive user interface UI in several languages. The UI can be accessed in your favorite browser on desktop, laptop, and mobile device...
PT-2026-58385
Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description A use-after-free condition in the Windows Backup Engine allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...
MAL-2026-10289 Malicious code in backup5-updated (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbc0dc5fea4212458853e895b9b9df474401727a4768f47e3016a8c871fd5c7 The package tarball contains multiple heavily obfuscated JavaScript bundles under assets/ AccountPage, DarkVeil, GamesPage, PlusBlockedNote,...
