Msp360 vulnerabilities
We track 4 vulnerabilities in Msp360 products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 23, 2025.
Latest Msp360 vulnerabilities
- 7.3 High severity
Free Backup: Improper Link Resolution Before File Access
MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSP360 Free Backup. An attacker must first obtain the ability to execute low-privileged co
- 9.8 Critical severity
Backup: Incorrect Default Permissions
An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Upgrade to MSP360 Backup 8.1.1.19 (release
- 9.8 Critical severity
Backup: Incorrect Default Permissions
An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 (released on 2025-04-22).
- 7.5 High severity
backup_agent: Improper Privilege Management
An issue discovered in MSP360 Backup Agent v7.8.5.15 and v7.9.4.84 allows attackers to obtain network share credentials used in a backup due to enginesettings.list being encrypted with a hard coded key.