CVE-2026-41560

Summary

WXD Backup Lite suffers from unauthenticated broken access control that allows attackers to bypass authentication and access protected backup functionality without any credentials. This vulnerability is particularly dangerous because it affects a backup tool that likely handles sensitive data, making unauthorized backups or data exposure possible.

Exploitability

Exploitation is straightforward with no prerequisites, as the vulnerability allows full access to backup functions without authentication, requiring only network access to the affected system.

Blast radius

The impact could be significant if exploited, potentially allowing attackers to access sensitive backup data, perform unauthorized backups, or manipulate backup configurations across all versions up to 1.0.2.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.0.3 or later to remediate this vulnerability, as the vendor has released a patch specifically addressing the broken access control issue.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.