CVE-2026-39802

Summary

A remote code execution vulnerability in Everest Backup allows attackers to execute arbitrary code on the target system without authentication. This is particularly dangerous because it affects versions up to 2.3.13 and can lead to full system compromise.

Exploitability

Exploitation requires no authentication and is relatively straightforward, though may need a specific payload format or input handling that could introduce complexity.

Blast radius

The vulnerability could affect any system running Everest Backup 2.3.13 or earlier, potentially allowing attackers to gain complete control over the backup server and access to all backed-up data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.3.14 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.