9.3
Critique
CVE-2026-66472 Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions
Description
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Everest Backup 2.3 | premières → 2.3.12 | Pas de correctif indiqué |
Autres CVE de Everest Backup
Les 5 CVE de Everest Backup →
CVE-2026-39802
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions
8.1
Élevée
CVE-2025-62992
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path…
6.5
Moyenne
CVE-2025-62946
Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly…
5.3
Moyenne
CVE-2025-49238
Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request…
4.3
Moyenne