VI
Vendor
Vinchin
12
CVEs
0
On KEV
0
New 30D
Products
VB9.8
Vinchin Backup And Recovery
Vinchin
9 CVEs0 on KEV0 new
BR6.5
Backup & Recovery 9.0
Vinchin
2 CVEs0 on KEV0 new
BA9.8
Backup and Recovery
Vinchin
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-60095 | BR Backup & Recovery 9.0 Vinchin | 6.5 | Jul 9 | Vinchin Backup & Recovery 9.0.0.86562 Stack Buffer Overflow via ModuleHandShake |
| CVE-2026-60094 | BR Backup & Recovery 9.0 Vinchin | 6.5 | Jul 9 | Vinchin Backup & Recovery 9.0.0.86562 Heap Buffer Overflow via agentlink_server |
| CVE-2024-25228 | VB Vinchin Backup And Recovery Vinchin | 8.8 | Mar 14 | Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php |
| CVE-2024-22903 | VB Vinchin Backup And Recovery Vinchin | 8.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function |
| CVE-2024-22902 | VB Vinchin Backup And Recovery Vinchin | 9.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials |
| CVE-2024-22901 | VB Vinchin Backup And Recovery Vinchin | 9.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials |
| CVE-2024-22900 | VB Vinchin Backup And Recovery Vinchin | 8.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function |
| CVE-2024-22899 | VB Vinchin Backup And Recovery Vinchin | 8.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function |
| CVE-2023-45499 | VB Vinchin Backup And Recovery Vinchin | 9.8 | Oct 27 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials |
| CVE-2023-45498 | VB Vinchin Backup And Recovery Vinchin | 9.8 | Oct 27 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability |
| CVE-2022-35866 | BA Backup and Recovery Vinchin | 9.8 | Aug 3 | This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561 |