CVE-2026-2627CWE-59

Softland FBackup Backup/Restore HID.dll link following

High · published February 17, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\Program Files\Common Files\microsoft shared\ink\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-02-17T21:32Z
EPSS history
Timeline
  • 17 FEB 21:32Z
    Softland FBackup Backup/Restore HID.dll link following
    cvelistv5