CVE-2020-8427

9.8 criticalEPSS 1.5%

Critical (9.8) in unitrends backup. EPSS 1.5% chance of exploitation in the next 30 days.

In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

unitrends:backup

References

https://support.unitrends.com/UnitrendsBackup/s/article/000006983
https://support.unitrends.com/UnitrendsBackup/s/article/000006983

Check your stack JSON