PT-2026-29572 · Enter · Iperius Backup

Vuldb + 1 · Publicado 2026-04-01 · Atualizado 2026-04-01 · CVE-2026-5310

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Baixa

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Iperius Backup versions up to 8.7.2

Description A security issue was found in Enter Software Iperius Backup up to version 8.7.2. The issue involves manipulation of the file IperiusAccounts.ini and leads to the use of a hard-coded cryptographic key. The attack requires local access and is considered to be of high complexity and difficult to exploit. The exploit is publicly available.

Recommendations Upgrade to version 8.7.4 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-321

CWE-320

Identificadores relacionados

CVE-2026-5310

Produtos afetados

Iperius Backup

Referências · 8

• 🔥 https://github.com/VulnaraByte/iperius-backup-security-advisories/blob/main/poc/decrypt_iperius.py · Exploit
• https://iperiusbackup.com/download-software-backup.aspx · Correção
• https://vuldb.com/vuln/354639 · Nota
• https://twitter.com/cyberbivash/status/2039421738715361502 · Publicação no Twitter
• https://vuldb.com/submit/778602 · Nota
• https://vuldb.com/vuln/354639/cti · Nota
• https://github.com/VulnaraByte/iperius-backup-security-advisories · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-5310 · Nota de Segurança