CVE-2022-36617: Haystacksoftware Arq Backup

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.

Affected products

• Haystacksoftware Arq Backup: up to and including 7.19.5.0

Published 2022-09-09. Last modified 2026-06-17.