NAKIVO vulnerabilities
We track 2 vulnerabilities in NAKIVO products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on April 8, 2025.
2vulnerabilities
0critical
2high
1exploited
8.6average CVSS score
Latest NAKIVO vulnerabilities
- 8.6 High severity
Backup & Replication Director: Improper Restriction of XML External Entity Reference
An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response.
- 8.6 High severity
NAKIVO Backup and Replication Absolute Path Traversal Exploited
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).