PT-2026-28133 · Enter · Iperius Backup

0Truust + 1 · Publicado 2026-03-25 · Atualizado 2026-03-26 · CVE-2026-4823

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Baixa

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Enter Software Iperius Backup versions up to 8.7.3

Description A flaw exists in Enter Software Iperius Backup related to the NTLM2 Handler component, potentially leading to information disclosure. Exploitation is limited to local execution and is considered highly complex and difficult. An exploit has been published.

Recommendations Upgrade to version 8.7.4 or later.

Exploit

Correção

Improper Access Control

Information Disclosure

Enumeração de Fraquezas

CWE-284

CWE-200

Identificadores relacionados

CVE-2026-4823

Produtos afetados

Iperius Backup

Referências · 9

• 🔥 https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/ntlm-relay-credential-exposure.md · Exploit
• https://vuldb.com/?submit.774218 · Nota
• https://twitter.com/CVEnew/status/2037137797941776491 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2037139124633649237 · Publicação no Twitter
• https://iperiusbackup.com/download-software-backup.aspx · Correção
• https://vuldb.com/?id.353123 · Nota
• https://vuldb.com/?ctiid.353123 · Nota
• https://twitter.com/cyberbivash/status/2036957435865276442 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4823 · Nota de Segurança