CVE-2025-15545 | BDVDB-2026-312928 Detail

Description#

The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows the attacker to gain root-level command execution, compromising confidentiality, integrity and availability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-01-29Record published in the CVE List.
2. Version 22026-02-26Most recent update recorded in the CVE List.