Vinchin vulnerabilities
We track 3 vulnerabilities in Vinchin products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 14, 2024.
Latest Vinchin vulnerabilities
- 8.8 High severity
vinchin_backup_and_recovery: Improper Neutralization of Special Elements used in a Command
Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.
- 8.8 High severity
Vinchin Backup And Recovery: Improper Neutralization of Special Elements used in a Command
Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function.
- 9.8 Critical severity
Backup and Recovery: Use of Hard-coded Credentials
This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MyS