CVE-2026-2627

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2627", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-02-17T13:24:38.763Z", "datePublished": "2026-02-17T21:32:06.630Z", "dateUpdated": "2026-02-23T10:16:10.914Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T10:16:10.914Z"}, "title": "Softland FBackup Backup/Restore HID.dll link following", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-59", "lang": "en", "description": "Link Following"}]}], "affected": [{"vendor": "Softland", "product": "FBackup", "versions": [{"version": "9.0", "status": "affected"}, {"version": "9.1", "status": "affected"}, {"version": "9.2", "status": "affected"}, {"version": "9.3", "status": "affected"}, {"version": "9.4", "status": "affected"}, {"version": "9.5", "status": "affected"}, {"version": "9.6", "status": "affected"}, {"version": "9.7", "status": "affected"}, {"version": "9.8", "status": "affected"}, {"version": "9.9", "status": "affected"}], "modules": ["Backup/Restore"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\\Program Files\\Common Files\\microsoft shared\\ink\\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.5, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P", "baseSeverity": "HIGH"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.8, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.8, "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-02-17T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-02-17T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-02-18T10:42:42.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Zeze7w (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.346279", "name": "VDB-346279 | Softland FBackup Backup/Restore HID.dll link following", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/?ctiid.346279", "name": "VDB-346279 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.752050", "name": "Submit #752050 | SOFTLAND FBackup 9.9 Link Following", "tags": ["third-party-advisory"]}, {"url": "https://github.com/thezdi/PoC/tree/main/FilesystemEoPs", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-18T20:37:12.888790Z", "id": "CVE-2026-2627", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-18T20:37:24.505Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2627", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-18T20:37:12.888790Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-18T20:37:18.812Z"}}], "cna": {"title": "Softland FBackup Backup/Restore HID.dll link following", "credits": [{"lang": "en", "type": "reporter", "value": "Zeze7w (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.5, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.8, "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "Softland", "modules": ["Backup/Restore"], "product": "FBackup", "versions": [{"status": "affected", "version": "9.0"}, {"status": "affected", "version": "9.1"}, {"status": "affected", "version": "9.2"}, {"status": "affected", "version": "9.3"}, {"status": "affected", "version": "9.4"}, {"status": "affected", "version": "9.5"}, {"status": "affected", "version": "9.6"}, {"status": "affected", "version": "9.7"}, {"status": "affected", "version": "9.8"}, {"status": "affected", "version": "9.9"}]}], "timeline": [{"lang": "en", "time": "2026-02-17T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-02-17T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-02-18T10:42:42.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.346279", "name": "VDB-346279 | Softland FBackup Backup/Restore HID.dll link following", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/?ctiid.346279", "name": "VDB-346279 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.752050", "name": "Submit #752050 | SOFTLAND FBackup 9.9 Link Following", "tags": ["third-party-advisory"]}, {"url": "https://github.com/thezdi/PoC/tree/main/FilesystemEoPs", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\\Program Files\\Common Files\\microsoft shared\\ink\\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-59", "description": "Link Following"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T10:16:10.914Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2627", "state": "PUBLISHED", "dateUpdated": "2026-02-23T10:16:10.914Z", "dateReserved": "2026-02-17T13:24:38.763Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-02-17T21:32:06.630Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Backup/Restore"], "product": "FBackup", "vendor": "Softland", "versions": [{"status": "affected", "version": "9.0"}, {"status": "affected", "version": "9.1"}, {"status": "affected", "version": "9.2"}, {"status": "affected", "version": "9.3"}, {"status": "affected", "version": "9.4"}, {"status": "affected", "version": "9.5"}, {"status": "affected", "version": "9.6"}, {"status": "affected", "version": "9.7"}, {"status": "affected", "version": "9.8"}, {"status": "affected", "version": "9.9"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\\Program Files\\Common Files\\microsoft shared\\ink\\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se ha descubierto una falla de seguridad en Softland FBackup hasta la versi\u00f3n 9.9. Esto afecta una funci\u00f3n desconocida en la biblioteca C:\\Program Files\\Common Files\\microsoft shared\\ink\\HID.dll del componente Copia de seguridad/Restauraci\u00f3n. La manipulaci\u00f3n resulta en seguimiento de enlaces. El ataque debe ser abordado localmente. El exploit ha sido publicado y puede ser utilizado para ataques. El proveedor fue contactado pronto sobre esta divulgaci\u00f3n pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-2627", "lastModified": "2026-06-17T10:31:25.570", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2627", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-18T20:37:12.888790Z", "version": "2.0.3"}}]}, "published": "2026-02-17T22:18:45.457", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/thezdi/PoC/tree/main/FilesystemEoPs"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.346279"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.346279"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.752050"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-59"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.9"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "FBackup", "source": "cna", "vendor": "Softland"}, "product": "fbackup", "vendor": "softland"}], "analysis": {"en": {"generated_at": "2026-04-17T18:50:48.439779+00:00", "value": {"mitigation_remediation": ["Upgrade to the latest version of Softland FBackup that contains the fix for the HID.dll path\u2011traversal issue.", "If an upgrade is not available, disable the Backup/Restore component or restrict file permissions on HID.dll so only trusted accounts can execute it.", "Monitor the system for unexpected executions of HID.dll or abnormal file access patterns, and investigate any suspicious activity promptly."], "summary": {"action": "Patch urgently", "impact": "Local File Access or Privilege Escalation"}, "threat_synthesis": {"affected_systems": "Softland FBackup versions up to 9.9 on Windows installations are affected. The flaw is confined to the HID.dll component located in C:\\Program Files\\Common Files\\microsoft shared\\ink. No other products or versions are reported as vulnerable at this time.", "description_and_impact": "The vulnerability resides in the HID.dll library used by Softland\u2019s FBackup Backup/Restore feature on Windows. By supplying a crafted link, a local attacker can trigger a path\u2011traversal flaw that causes the system to follow arbitrary paths. This allows a privileged user to read, modify, or execute files on the host, potentially leading to information disclosure or privilege escalation.", "risk_and_exploitability": "The CVSS score of 8.5 indicates high severity, while the EPSS of less than 1% suggests a low probability of widespread exploitation in the short term. The flaw requires local access, so the risk is limited to users who can log on or run programs on the affected machine. It is not listed in the CISA KEV catalog, reducing its visibility in large\u2011scale threat feeds."}}}}, "created": "2026-02-18T10:33:11.889235+00:00", "updated": "2026-04-17T19:00:11.030890+00:00", "vendors": ["softland", "softland$PRODUCT$fbackup"]}