5.3
Medium
CVE-2025-62946 Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through <= 2.3.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Everest Backup 2.3 | earliest → 2.3.8 | No fix stated |
Other CVEs of Everest Backup
The 5 CVEs of Everest Backup →
CVE-2026-39802
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions
8.1
High
CVE-2026-66472
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions
9.3
Critical
CVE-2025-62992
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path…
6.5
Medium
CVE-2025-49238
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request…
4.3
Medium