PT-2026-28125 · Unknown · Iperius Backup

0Truust + 1 · Published 2026-03-25 · Updated 2026-03-26 · CVE-2026-4822

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Enter Software Iperius Backup versions 8.7.3 and earlier

Description A security issue exists in Enter Software Iperius Backup related to the Backup Service component. A manipulation of files within the C:ProgramDataIperiusBackupJobs directory, specifically an unknown function, can lead to the creation of temporary files with insecure permissions. This issue requires local access to exploit and is considered difficult to execute, requiring a high degree of complexity. The exploit is publicly available.

Recommendations Upgrade to version 8.7.4 or later to address this issue.

Exploit

Fix

LPE

Weakness Enumeration

CWE-378

CWE-377

Related Identifiers

CVE-2026-4822

Affected Products

Iperius Backup

References · 8

• 🔥 https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/arbitrary-file-disclosure.md · Exploit
• https://iperiusbackup.com/download-software-backup.aspx · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-4822 · Security Note
• https://vuldb.com/?submit.774209 · Note
• https://twitter.com/cyberbivash/status/2036957808692789265 · Twitter Post
• https://vuldb.com/?id.353122 · Note
• https://vuldb.com/?ctiid.353122 · Note
• https://twitter.com/CVEnew/status/2036911772511437158 · Twitter Post