Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-32999

Remote Code Execution via Unsanitized Signing Module in Comet Backup Server

Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Webpros
Products
Comet Backup
CVE-2026-29200

Critical IDOR in Comet Backup Enables Tenant Admin Impersonation

A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call.

CVSS 4.0 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Webpros
Products
Comet Backup