Beveiligingsadvies

CVE-2026-29200

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-04 05:42:15

Laatst bijgewerkt 2026-05-04 19:44:22

Toegewezen door hackerone

CVSS-score 9.9

Status PUBLISHED

Beschrijving

A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call.

← Alle CVE's bekijken Bekijk op cve.org ↗