CWE-530 · Information Disclosure
Exposure of Backup File to an Unauthorized Control Sphere
14CVEs
SortMost likely exploited
14 CVEs with CWE-530 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-36899QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File DisclosureShenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng A… · QiHang Media Web Digital Signage · CVSS 8.7 · 2025-12-10 | 8.7 | 1.0% | 2025-12-10 |
| CVE-2023-5297Xinhu RockOA start backupXinhu · RockOA · CVSS 3.7 · 2023-09-29 | 3.7 | 0.8% | 2023-09-29 |
| CVE-2024-7315Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data ExposureWpvivid · Migration, Backup, Staging · CVSS 7.5 · 2024-10-02 | 7.5 | 0.6% | 2024-10-02 |
| CVE-2024-12330WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposuredatabasebackup · WP Database Backup – Unlimited Database & Files Backup by Backup for WP · CVSS 7.5 · 2025-01-09 | 7.5 | 0.5% | 2025-01-09 |
| CVE-2024-56462IBM QRadar SIEM is vulnerable to using components with known vulnerabilitiesIBM · QRadar · CVSS 7.2 · 2026-05-27 | 7.2 | 0.5% | 2026-05-27 |
| CVE-2014-125136C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backupC97net · qEngine CMS · CVSS 5.9 · 2026-10-28 | 5.9 | 0.4% | 2026-10-28 |
| CVE-2024-2364Musicshelf Backup androidmanifest.xml backupKirillmakarov · Musicshelf · CVSS 1.8 · 2024-03-10 | 1.8 | 0.3% | 2024-03-10 |
| CVE-2024-3124fridgecow smartalarm Backup File androidmanifest.xml backupfridgecow · smartalarm · CVSS 2.4 · 2024-04-01 | 2.4 | 0.3% | 2024-04-01 |
| CVE-2024-3128Replify-Messenger Backup File androidmanifest.xml backupReplify-Messenger · CVSS 2.4 · 2024-04-01 | 2.4 | 0.3% | 2024-04-01 |
| CVE-2024-3430QKSMS Backup File androidmanifest.xml backupQKSMS · CVSS 2.4 · 2024-04-07 | 2.4 | 0.2% | 2024-04-07 |
| CVE-2024-2567jurecapuder AndroidWeatherApp Backup File androidmanifest.xml backupjurecapuder · AndroidWeatherApp · CVSS 1.8 · 2024-03-17 | 1.8 | 0.2% | 2024-03-17 |
| CVE-2026-13514Chess Play and Learn App com.chess AndroidManifest.xml backupChess · Play and Learn App · CVSS 2.4 · 2026-06-28 | 2.4 | 0.2% | 2026-06-28 |
| CVE-2025-3773A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information s…Trellix · System Information Reporter · CVSS 0 · 2025-06-26 | 0.0 | 0.1% | 2025-06-26 |
| CVE-2026-2974AliasVault App Backup aliasvault.xml backupAliasvault · AliasVault App · CVSS 2.5 · 2026-02-23 | 2.5 | 0.1% | 2026-02-23 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.