CVE-2026-39802 Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions

Description

Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.

Affected products and versions

Product	Affected versions	Fixed in
Everest Backup 2.3	earliest → 2.3.13	No fix stated

Other CVEs of Everest Backup

The 5 CVEs of Everest Backup →

CVE-2026-66472 Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions 9.3 Critical CVE-2025-62992 Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path… 6.5 Medium CVE-2025-62946 Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly… 5.3 Medium CVE-2025-49238 Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request… 4.3 Medium