Critical (9.8) in unitrends enterprise backup. EPSS 4.4% chance of exploitation in the next 30 days.
An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.
Severity
CVSS 3.0
9.8 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)