Iperius Backup CVE-2026-4822

Local attacker with low-privilege user account on Windows system running Iperius Backup bis versions up to 8.7.3. Attacker must manipulate files in C:\ProgramData\IperiusBackup\Jobs\ directory where Backup Service creates temporary files with insecure permissions. No user interaction required.

Despite a CVSS base score of 7.0 (High), the real-world risk is moderated by several factors. The CVSS vector indicates local access is required (AV:L), attack complexity is high (AC:H), and exploitability is rated as 'Proof-of-concept' (E:P) with difficulty noted in the description. The vulnerability requires an attacker to already have local, low-privileged access (PR:L) to the system, and the attack complexity suggests sophisticated knowledge of timing or race conditions may be necessary. While a public POC exists (https://github.com/0truust/iperius-backup-security-advisories), the vendor has already released a patch (RL:O) and responded professionally, reducing the window of exposure. This is not a remotely exploitable or easily automatable vulnerability, making it a lower priority than remote code execution flaws with similar CVSS scores, though it remains relevant for environments where local users are not fully trusted or where backup systems process sensitive data.

An attacker with local, low-privileged access to a Windows system running Iperius Backup 8.7.3 or earlier could monitor or manipulate temporary files created in C:\ProgramData\IperiusBackup\Jobs\ by the Backup Service. By exploiting the insecure permissions, the attacker could potentially read sensitive backup configuration data, credentials, or file paths, or manipulate job files to escalate privileges or gain unauthorized access to backup data. A public proof-of-concept demonstrating arbitrary file disclosure is available at https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/arbitrary-file-disclosure.md, though successful exploitation requires high attack complexity and sophisticated timing.