9.1 CriticalCWE-94
CVE-2026-32999
WebPros Comet Backup vulnerability
WebProsComet Backup
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 24% of scored CVEs
SeverityCVSS
9.1Critical
Description NVD
Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices.
Coverage 1 article · 1 outlet
- Critical CVE-2026-32999 flaw in Comet Backup permits remote codeSecurityOnline · first in our coverage