Vinchin

11 CVEs across 3 Vinchin products. Browse Vinchin vulnerabilities, severities, and proof-of-concept exploits.

Vinchin products with known CVEs

ProductCVEs
Vinchin Backup And Recovery9
Backup & Recovery 9.02
Backup And Recovery1
Vinchin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-60095Medium6.52026-07-09Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlink_server service th…
CVE-2026-60094Medium6.52026-07-09Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerability that allows unauthenticated remote attackers to cause process crash…
CVE-2024-25228High8.82024-03-14Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler…
CVE-2024-22903High8.82024-02-02Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function.
CVE-2024-22902Critical9.82024-02-02Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
CVE-2024-22901Critical9.82024-02-02Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
CVE-2024-22900High8.82024-02-02Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function.
CVE-2024-22899High8.82024-02-02Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function.
CVE-2023-45499Critical9.82023-10-27VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.
CVE-2023-45498Critical9.82023-10-27VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.
CVE-2022-35866Critical9.82022-08-03This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not…