Approved changes feed: RSS · Atom

cpe:2.3:a:vinchin:vinchin_backup_and_recovery:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVinchin (2b19c452-d379-58ca-b357-398f4ebd0097)
ProductVinchin Backup And Recovery (2dc57a34-945a-5afd-9ef9-74c1637c9ded)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25228 vulnerable 2026-06-08 06:31:22.682975 Details available
Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.
Published: 2024-03-14T00:00:00.000Z
Updated: 2025-11-04T18:29:19.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22903 vulnerable 2026-06-08 06:29:36.145149 Details available
Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function.
Published: 2024-02-02T00:00:00.000Z
Updated: 2026-07-09T00:29:53.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22902 vulnerable 2026-06-08 06:29:36.144658 Details available
Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
Published: 2024-02-02T00:00:00.000Z
Updated: 2026-07-09T00:29:52.444Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22901 vulnerable 2026-06-08 06:29:36.144258 Details available
Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
Published: 2024-02-02T00:00:00.000Z
Updated: 2026-07-09T00:29:51.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22900 vulnerable 2026-06-08 06:29:36.143746 Details available
Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function.
Published: 2024-02-02T00:00:00.000Z
Updated: 2026-07-09T00:29:49.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22899 vulnerable 2026-06-08 06:29:36.143159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45499 vulnerable 2026-06-08 06:12:42.633345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45498 vulnerable 2026-06-08 06:12:42.632530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.