CVE-2024-22902
CRITICAL 9.8EPSS 1.1%
Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.07% chance of exploitation in the next 30 days, 62th percentile
- Published
- 2024-02-02
- Updated
- 2026-07-09
Proof-of-concept exploits (2)
- https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/
- Chocapikk/CVE-2024-22899-to-22903-ExploitChain8★ · 2025-04-06