CVE-2023-52262: Outdoorbits Little Backup Box

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used for untrusted input.

Affected products

• Outdoorbits Little Backup Box: before 2023-10-03 (fixed in 2023-10-03)

Published 2023-12-30. Last modified 2026-06-17.