PT-2026-28134 · Enter · Iperius Backup

0Truust + 1 · Publicado 2026-03-25 · Atualizado 2026-03-26 · CVE-2026-4824

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Enter Software Iperius Backup versions through 8.7.3

Description A flaw exists in the Backup Job Configuration File Handler component of Enter Software Iperius Backup. This issue relates to improper privilege management and requires local access to exploit. Exploitation is considered difficult, but the exploit has been publicly disclosed. The vendor was promptly notified and released a fix.

Recommendations Upgrade to version 8.7.4 to resolve this issue.

Exploit

Correção

Incorrect Privilege Assignment

Improper Privilege Management

Enumeração de Fraquezas

CWE-266

CWE-269

Identificadores relacionados

CVE-2026-4824

Produtos afetados

Iperius Backup

Referências · 9

• 🔥 https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/privilege-escalation-rce.md · Exploit
• https://twitter.com/cyberbivash/status/2036957431373127683 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4824 · Nota de Segurança
• https://vuldb.com/?id.353124 · Nota
• https://iperiusbackup.com/download-software-backup.aspx · Correção
• https://vuldb.com/?ctiid.353124 · Nota
• https://twitter.com/CVEnew/status/2037137796964516171 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2037139107369877960 · Publicação no Twitter
• https://vuldb.com/?submit.774220 · Nota