PT-2026-28134 · Enter · Iperius Backup

0Truust + 1 · Published 2026-03-25 · Updated 2026-03-26 · CVE-2026-4824

Positive Technologies · (AI Summary)

CVSS v3.1

7.0

High

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Enter Software Iperius Backup versions through 8.7.3

Description A flaw exists in the Backup Job Configuration File Handler component of Enter Software Iperius Backup. This issue relates to improper privilege management and requires local access to exploit. Exploitation is considered difficult, but the exploit has been publicly disclosed. The vendor was promptly notified and released a fix.

Recommendations Upgrade to version 8.7.4 to resolve this issue.

Exploit

Fix

Improper Privilege Management

Incorrect Privilege Assignment

Weakness Enumeration

CWE-269

CWE-266

Related Identifiers

CVE-2026-4824

Affected Products

Iperius Backup

References · 8

• 🔥 https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/privilege-escalation-rce.md · Exploit
• https://iperiusbackup.com/download-software-backup.aspx · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-4824 · Security Note
• https://twitter.com/cyberbivash/status/2036957431373127683 · Twitter Post
• https://vuldb.com/?id.353124 · Note
• https://vuldb.com/?ctiid.353124 · Note
• https://vuldb.com/?submit.774220 · Note
• https://twitter.com/CVEnew/status/2037137796964516171 · Twitter Post