Platform
windows
Component
iperius-backup-security-advisories
Fixed in
8.7.1
8.7.2
8.7.3
8.7.4
CVE-2026-4824 affects Iperius Backup versions 8.7.0 through 8.7.3. This vulnerability involves improper privilege management within the Backup Job Configuration File Handler, potentially allowing for unauthorized actions. An attacker with local access can exploit this flaw. The vulnerability is resolved in version 8.7.4, and upgrading is strongly recommended.
Successful exploitation of CVE-2026-4824 could allow a local attacker to escalate their privileges within the Iperius Backup environment. This could lead to unauthorized access to backup data, modification of backup configurations, or even the execution of arbitrary commands on the system hosting the backup software. The local access requirement limits the immediate blast radius, but a compromised system could be used as a stepping stone for further attacks within the network. The public disclosure of the exploit increases the risk of immediate exploitation.
CVE-2026-4824 has been publicly disclosed, increasing the likelihood of exploitation. The EPSS score is likely to be medium or high given the public availability of the exploit. While no specific campaigns have been publicly linked to this vulnerability, the ease of exploitation and public disclosure make it an attractive target for opportunistic attackers. The vulnerability was published on 2026-03-25.
Exploit Status
EPSS
0.01% (1% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2026-4824 is to upgrade Iperius Backup to version 8.7.4 or later. If an immediate upgrade is not feasible due to compatibility issues or system downtime constraints, consider restricting local access to the Iperius Backup server. Implement strict user access controls and monitor backup job configurations for any unexpected changes. While a direct WAF rule is unlikely to be effective, monitoring for unusual file modification activity within the backup configuration directory could provide an early warning sign. After upgrading, verify the fix by attempting to modify a backup job configuration file with a non-privileged user account to confirm that access is denied.
Actualice Iperius Backup a la versión 8.7.4 o superior. Esta actualización corrige la vulnerabilidad de gestión de privilegios en el manejo de archivos de configuración de trabajos de copia de seguridad.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2026-4824 is a HIGH severity vulnerability affecting Iperius Backup versions 8.7.0–8.7.3. It allows local attackers to potentially escalate privileges by manipulating backup job configuration files.
If you are running Iperius Backup versions 8.7.0 through 8.7.3, you are potentially affected by this vulnerability. Check your version and upgrade immediately.
Upgrade Iperius Backup to version 8.7.4 or later to resolve this vulnerability. If an upgrade is not immediately possible, restrict local access to the Iperius Backup server.
While no active campaigns have been publicly confirmed, the vulnerability has been publicly disclosed, increasing the risk of exploitation by opportunistic attackers.
Please refer to the official Iperius Backup website or their security advisory page for the latest information and updates regarding CVE-2026-4824.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.