9.3
Critical
CVE-2026-66472 Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions
Description
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Everest Backup 2.3 | earliest → 2.3.12 | No fix stated |
Other CVEs of Everest Backup
The 5 CVEs of Everest Backup →
CVE-2026-39802
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions
8.1
High
CVE-2025-62992
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path…
6.5
Medium
CVE-2025-62946
Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly…
5.3
Medium
CVE-2025-49238
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request…
4.3
Medium