CVE-2023-45498: Vinchin Backup And Recovery

Critical severity, CVSS 9.8. EPSS: 20.5% chance of exploitation in the next 30 days.

VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.

Affected products

• Vinchin Vinchin Backup And Recovery: from 5.0, up to and including 7.0

Published 2023-10-27. Last modified 2026-06-17.