CVE-2025-62842High· 7.8▾ TwilightAn external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We h…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.3%
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories.
We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
hybrid_backup_sync < 26.2.0.938Upgrade past the affected range:
hybrid_backup_sync 26.2.0.938Connected by shared product, vendor, weakness, or advisory.
CVE-2025-62840Low· 3.3A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync
CVE-2026-26158High· 7.0A flaw was found in BusyBox
CVE-2026-26157High· 7.0A flaw was found in BusyBox
CVE-2026-26244High· 8.8A SQL injection vulnerability has been reported to affect Video Station
CVE-2026-26245High· 8.8A SQL injection vulnerability has been reported to affect Video Station
CVE-2026-44084High· 7.5An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station