CVE-2024-39206: MSP360 Backup Agent

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue discovered in MSP360 Backup Agent v7.8.5.15 and v7.9.4.84 allows attackers to obtain network share credentials used in a backup due to enginesettings.list being encrypted with a hard coded key.

Affected products

• MSP360 Backup Agent: version 7.8.5.15 only; version 7.9.4.84 only

Published 2024-07-02. Last modified 2026-06-17.