PT-2026-28125 · Unknown · Iperius Backup

0Truust + 1 · Publicado 2026-03-25 · Atualizado 2026-03-26 · CVE-2026-4822

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Enter Software Iperius Backup versions 8.7.3 and earlier

Description A security issue exists in Enter Software Iperius Backup related to the Backup Service component. A manipulation of files within the C:ProgramDataIperiusBackupJobs directory, specifically an unknown function, can lead to the creation of temporary files with insecure permissions. This issue requires local access to exploit and is considered difficult to execute, requiring a high degree of complexity. The exploit is publicly available.

Recommendations Upgrade to version 8.7.4 or later to address this issue.

Exploit

Correção

LPE

Enumeração de Fraquezas

CWE-378

CWE-377

Identificadores relacionados

CVE-2026-4822

Produtos afetados

Iperius Backup

Referências · 8

• 🔥 https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/arbitrary-file-disclosure.md · Exploit
• https://vuldb.com/?submit.774209 · Nota
• https://iperiusbackup.com/download-software-backup.aspx · Correção
• https://twitter.com/cyberbivash/status/2036957808692789265 · Publicação no Twitter
• https://vuldb.com/?id.353122 · Nota
• https://vuldb.com/?ctiid.353122 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4822 · Nota de Segurança
• https://twitter.com/CVEnew/status/2036911772511437158 · Publicação no Twitter