CVE-2022-36617

4.9 mediumEPSS 0.5%

Medium (4.9) in haystacksoftware arq backup. EPSS 0.5% chance of exploitation in the next 30 days.

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2022-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

haystacksoftware:arq_backup

References

https://startrekdude.github.io/arqbackup.html
https://www.arqbackup.com/download/arqbackup/arq7windows_release_notes.html
https://startrekdude.github.io/arqbackup.html
https://www.arqbackup.com/download/arqbackup/arq7windows_release_notes.html

Check your stack JSON