Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-32999 1 Webpros 1 Comet Backup 2026-05-28 9.1 Critical
Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices.
CVE-2026-29200 1 Webpros 1 Comet Backup 2026-05-04 N/A
A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call.