Paper/Archive/CVE-2026-32999

CVE-2026-32999

WebPros Comet Backup — Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execu…

EPSS 0.3%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 24.3.243 × 204.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices.

Affected

ProductAffectedFixed inSource

Comet Backup< 26.4.326.4.3CNA

Comet Backup< 26.5.026.5.0CNA

Scores by source

hackerone (CNA)9.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.cometbackup.com/hc/en-us/articles/40655100268439--CVE-2026-32999-RCE-on-Comet-Server-via-branding-configuration