PT-2025-52693 · Unknown · Cobian Backup Gravity

Luis Martinez · Published 2025-12-22 · Updated 2025-12-23 · CVE-2022-50688

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cobian Backup Gravity version 11.2.0.582

Description The software contains an unquoted service path issue. This allows local users to potentially execute arbitrary code with elevated system privileges. An attacker can exploit the unquoted service path in the CobianBackup11 service to inject malicious code that would execute with LocalSystem privileges during service startup.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider modifying the service path to include quotes to prevent malicious code execution.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-50688

Affected Products

Cobian Backup Gravity

References · 6

• 🔥 https://exploit-db.com/exploits/50791 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50688 · Security Note
• https://twitter.com/CVEnew/status/2003233954980331946 · Twitter Post
• https://vulncheck.com/advisories/cobian-backup-gravity-unquoted-service-path-privilege-escalation · Note
• https://cobiansoft.com · Note
• https://twitter.com/TheHackerWire/status/2003401757146358239 · Twitter Post