PT-2026-29572 · Enter · Iperius Backup

Vuldb + 1 · Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-5310

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Iperius Backup versions up to 8.7.2

Description A security issue was found in Enter Software Iperius Backup up to version 8.7.2. The issue involves manipulation of the file IperiusAccounts.ini and leads to the use of a hard-coded cryptographic key. The attack requires local access and is considered to be of high complexity and difficult to exploit. The exploit is publicly available.

Recommendations Upgrade to version 8.7.4 or later.

Exploit

Fix

Weakness Enumeration

CWE-321

CWE-320

Related Identifiers

CVE-2026-5310

Affected Products

Iperius Backup

References · 8

• 🔥 https://github.com/VulnaraByte/iperius-backup-security-advisories/blob/main/poc/decrypt_iperius.py · Exploit
• https://iperiusbackup.com/download-software-backup.aspx · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-5310 · Security Note
• https://vuldb.com/vuln/354639 · Note
• https://twitter.com/cyberbivash/status/2039421738715361502 · Twitter Post
• https://vuldb.com/submit/778602 · Note
• https://vuldb.com/vuln/354639/cti · Note
• https://github.com/VulnaraByte/iperius-backup-security-advisories · Note