ZDI-CAN-28568 HIGH 7.5 Upcoming Feb 25, 2026

AOMEI

AOMEI, known for backup and disk utility software, has a high-severity vulnerability (CVSS 7.5) that allows unauthenticated remote attackers to access sensitive information over the network with no user interaction required. The vulnerability impacts confidentiality but does not affect system integrity or availability. Security teams should monitor for any exploitation attempts against AOMEI products and ensure customers apply patches once the vendor releases them by the June 2026 deadline.

Advisory Details
Researcher Bobby Gould (@bobbygould5) of Trend Zero Day Initiative
Reported February 25, 2026
Deadline June 25, 2026 70d
CVSS Vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy