ZDI-CAN-28568
HIGH 7.5
Upcoming
Feb 25, 2026
AOMEI
AOMEI, known for backup and disk utility software, has a high-severity vulnerability (CVSS 7.5) that allows unauthenticated remote attackers to access sensitive information over the network with no user interaction required. The vulnerability impacts confidentiality but does not affect system integrity or availability. Security teams should monitor for any exploitation attempts against AOMEI products and ensure customers apply patches once the vendor releases them by the June 2026 deadline.
Advisory Details
Researcher
Bobby Gould (@bobbygould5) of Trend Zero Day Initiative
Reported
February 25, 2026
Deadline
June 25, 2026
70d
CVSS Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N