CVE-2026-97241

Summary

BackupEase versions 2.2.2 and earlier have an unauthenticated sensitive data exposure vulnerability where attackers can access backup configuration files and credentials without any authentication. This allows unauthorized users to extract sensitive backup data and potentially gain access to underlying systems.

Exploitability

The vulnerability is highly exploitable as it requires no authentication or user interaction, with attackers able to directly access sensitive backup files through unauthenticated API endpoints or web interfaces.

Blast radius

The impact could be significant across all BackupEase installations running versions 2.2.2 or earlier, potentially exposing backup credentials, configuration data, and sensitive backup files to any external attacker.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to BackupEase version 2.2.3 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.