Which versions of Iperius Backup are affected by CVE-2026-4822?

Iperius Backup versions through 8.7.3 contain a local privilege escalation vulnerability that could allow an insider or attacker with local access to compromise system integrity and access sensitive…. A patch is available.

Is there a public PoC exploit available for CVE-2026-4822?

Yes, a public proof-of-concept exploit is available for CVE-2026-4822. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-4822?

Within 24 hours: Inventory all systems running Iperius Backup and identify affected versions (8.7.3 and below). Within 7 days: Apply the available vendor patch to all affected systems and verify successful installation. Within 30 days: Conduct a security audit of backup service configurations and review access logs for any suspicious local activity; implement monitoring on the C:\ProgramData\IperiusBackup\Jobs\ directory for unauthorized file access attempts.

Iperius Backup CVE-2026-4822

Q: What is the CVSS score of CVE-2026-4822?

CVE-2026-4822 has a CVSS 4.0 base score of 6.4 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-16002 MEDIUM

Creation of Temporary File With Insecure Permissions (CWE-378)

2026-03-25 VulDB

GHSA-f8vx-q848-4v5x

Information Disclosure Iperius Backup

6.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.4 MEDIUM

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

HIGH MEDIUM

CVSS changed

Apr 29, 2026 - 01:11 NVD

7.3 (HIGH) 6.4 (MEDIUM)

Re-analysis Queued

Apr 24, 2026 - 16:37 vuln.today

cvss_changed

PoC Detected

Mar 30, 2026 - 13:26 vuln.today

Public exploit code

EUVD ID Assigned

Mar 25, 2026 - 20:47 euvd

EUVD-2026-16002

Analysis Generated

Mar 25, 2026 - 20:47 vuln.today

Patch released

Mar 25, 2026 - 20:47 nvd

Patch available

CVE Published

Mar 25, 2026 - 20:31 nvd

HIGH 7.3

DescriptionCVE.org

A vulnerability was detected in Enter Software Iperius Backup bis 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of the component Backup Service. Performing a manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The exploit is now public and may be used. Upgrading to version 8.7.4 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

AnalysisAI

Iperius Backup 8.7.3 creates temporary files with insecure permissions in the Backup Service component, allowing local authenticated attackers to potentially escalate privileges or access sensitive data. The vulnerability requires local access and high attack complexity, but public exploit code exists. Upgrading to version 8.7.4 resolves the issue.

Technical ContextAI

The vulnerability affects Enter Software Iperius Backup (CPE: cpe:2.3:a:enter_software:iperius_backup:*:*:*:*:*:*:*:*) through version 8.7.3. It is classified under CWE-378 (Creation of Temporary File With Insecure Permissions), where the Backup Service component creates temporary files in C:\ProgramData\IperiusBackup\Jobs\ with permissions that allow unauthorized local users to read, modify, or leverage these files. This class of vulnerability typically arises when applications fail to properly restrict file permissions during temporary file creation, allowing lower-privileged users to access sensitive data or manipulate files to escalate privileges. The Windows-specific file path indicates this affects only Windows deployments of Iperius Backup.

RemediationAI

Upgrade Iperius Backup to version 8.7.4 or later immediately, available from https://www.iperiusbackup.com/download-software-backup.aspx. The vendor responded professionally and released a fixed version promptly. Until the upgrade can be applied, implement compensating controls such as restricting local access to the C:\ProgramData\IperiusBackup\Jobs\ directory through Windows file system ACLs to prevent lower-privileged users from accessing this location, and ensure only trusted administrators have local access to systems running Iperius Backup. Monitor the directory for unexpected file access or modification attempts. Review the detailed security advisory at https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/arbitrary-file-disclosure.md for additional technical details.