CVE-2025-43595

CVE-2025-43595 describes an insecure filesystem permissions vulnerability in MSP360 Backup 4.3.1.115 where a low-privileged user can execute commands with root privileges in the 'Online Backup' folder. Multiple connected sources corroborate the affected product/version and the root cause (imprope...

CVE-2025-43596

The CVE-2025-43596 entry concerns MSP360 Backup (MSP360 Backup for Windows) with an insecure filesystem permissions issue in version 8.0 that lets a low-privileged user run commands with SYSTEM privileges via a specially crafted backup target file. Reported impact in public sources notes high/cri...