← Back to browse · API

CVE-2024-25228

Severity
HIGH
CVSS
8.8
EPSS
0.25887
Risk score
44.26
CISA KEV
No
PoC
No
Published
2024-03-14
Modified
2025-11-04
First seen
2026-08-07
Aliases
EUVD-2024-22564, GHSA-2HX4-GPWF-5QV2
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-22564

Description

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

References