Security Advisory

CVE-2026-29200

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-04 05:42:15

Last updated 2026-05-04 19:44:22

Assigner hackerone

CVSS score 9.9

State PUBLISHED

Description

A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call.

← Browse all CVEs View on cve.org ↗