CVE-2026-19820 | BDVDB-2026-366804 Detail
BackblazeBackblaze Client
Description#
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows OS security controls. This vulnerability is due to improper link resolution.
Impact#
Per CVSS v4.0: confidentiality impact none, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-59 Improper Link Resolution Before File Access
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.