PT-2026-28133 · Enter · Iperius Backup

0Truust + 1 · Published 2026-03-25 · Updated 2026-03-26 · CVE-2026-4823

Positive Technologies · (AI Summary)

CVSS v3.1

2.5

Low

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Enter Software Iperius Backup versions up to 8.7.3

Description A flaw exists in Enter Software Iperius Backup related to the NTLM2 Handler component, potentially leading to information disclosure. Exploitation is limited to local execution and is considered highly complex and difficult. An exploit has been published.

Recommendations Upgrade to version 8.7.4 or later.

Exploit

Fix

Information Disclosure

Improper Access Control

Weakness Enumeration

CWE-200

CWE-284

Related Identifiers

CVE-2026-4823

Affected Products

Iperius Backup

References · 8

• 🔥 https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/ntlm-relay-credential-exposure.md · Exploit
• https://iperiusbackup.com/download-software-backup.aspx · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-4823 · Security Note
• https://twitter.com/CVEnew/status/2037137797941776491 · Twitter Post
• https://twitter.com/cyberbivash/status/2036957435865276442 · Twitter Post
• https://vuldb.com/?id.353123 · Note
• https://vuldb.com/?ctiid.353123 · Note
• https://vuldb.com/?submit.774218 · Note