CVE-2017-7280: Unitrends Enterprise Backup

Critical severity, CVSS 9.8. EPSS: 6.2% chance of exploitation in the next 30 days.

An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable.

Affected products

• Unitrends Enterprise Backup: up to and including 8.2.0-8

Published 2017-04-12. Last modified 2026-06-17.