CVE-2024-25228: Vinchin Backup And Recovery

High severity, CVSS 8.8. EPSS: 25.9% chance of exploitation in the next 30 days.

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

Affected products

• Vinchin Vinchin Backup And Recovery: up to and including 7.2

Published 2024-03-14. Last modified 2026-06-17.