CVE-2025-62842CWE-73

HBS 3 Hybrid Backup Sync

High · published January 2, 2026

CVSS v4.0
7.0
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

⚡ An attacker with local network access can play with your files! This external control of file name or path vulnerability in HBS 3 Hybrid Backup Sync is a real game-changer! 🔥 Think of this like a delivery person who can open any package in a stack without checking the address. If they can manipulate the file paths, they might swap out your prized pizza for a box of old socks! The consequences could be absolutely devastating! An attacker could read sensitive files or even modify directories, leading to data leaks or corruption. Your backups might turn into a mess, and restoring them could become a nightmare!

Put simply

Think of this like a delivery person who can open any package in a stack without checking the address. If they can manipulate the file paths, they might swap out your prized pizza for a box of old socks! This vulnerability allows attackers who gain access to the local network to exploit improper validation of file paths, making it possible to read or alter files without proper authorization.

What to do

The consequences could be absolutely devastating! An attacker could read sensitive files or even modify directories, leading to data leaks or corruption. Your backups might turn into a mess, and restoring them could become a nightmare! To protect yourself, immediately update HBS 3 Hybrid Backup Sync to version 26.2.0.938 or later. Additionally, restrict local network access to trusted devices and regularly audit your security settings. Don't leave any doors open! You've got this! By taking these steps swiftly, you'll keep your data safe and sound. 🛡️

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00267 · 17.9th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2026-01-02T15:51Z
EPSS history
Timeline
  • 02 JAN 15:51Z
    HBS 3 Hybrid Backup Sync
    cvelistv5