Veille CVE

Recherche « WebPros Comet Backup »

2 CVE

Critique 2 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « WebPros Comet Backup » ✕
  1. CVE-2026-32999 9.0 Critique

    WebPros Comet Backup

    Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices.

  2. CVE-2026-29200 9.9 Critique

    WebPros Comet Backup

    A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call.