PT-2026-51190 · Aomei · Backupper

Winslow1984 · Published 2026-06-20 · Updated 2026-06-21 · CVE-2026-12780

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Incorrect Privilege Assignment

Improper Access Control

Weakness Enumeration

CWE-266

CWE-284

Related Identifiers

CVE-2026-12780

Affected Products

Backupper

References · 7

• 🔥 https://winslow1984.com/books/cve-collection/page/aomei-backupper-830-kernel-driver-amwrtdrvsys-local-privilege-escalation · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12780 · Security Note
• https://vuldb.com/vuln/372521 · Note
• https://vuldb.com/submit/835609 · Note
• https://twitter.com/senzee1984/status/2068475267102752988 · Twitter Post
• https://vuldb.com/cve/CVE-2026-12780 · Note
• https://vuldb.com/vuln/372521/cti · Note