CVE-2025-29556

The ExaGrid EX10 backup appliance (versions 6.3 through 7.0.1.P08 ) is vulnerable to an Incorrect Access Control flaw. A flaw in the account creation process allows an attacker with Admin access to bypass restrictions on creating or modifying users with the Security Officer role. By intercepting ...