Read the docs

Backblaze

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Backblaze records in CISA KEV

No Backblaze vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Backblaze 2 records MEDIUM B2 Command Line Tool 1 record LOW B2 Python Software Development Kit 1 record LOW

Records

5 records

TI-2020-06706 CVE-2020-8289 · GHSA-7f55-fqw6-8jjp

Improper certificate validation in Backblaze

Priority MEDIUM 42

Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardcoded whitelist of strings in URLs where validation is disable…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04696 Published 2020-12-27 No fix listed CWE-295
TI-2020-06707 CVE-2020-8290 · GHSA-mfc8-4qmg-g3x6

Improper privilege management in Backblaze

Priority LOW 35

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of client update directori…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00589 Published 2020-12-27 Fixed in 7.0.0.439 CWE-269
TI-2026-16071 CVE-2026-19820 · GHSA-wf7j-r93f-5cvm

Backblaze Client for Windows Improper Link Resolution Vulnerability

Priority LOW 33

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup.

CVSS 4.0MEDIUM 5.8 Network No auth No interaction EPSS 0.0049 Published 2026-09-01 No fix listed CWE-59
TI-2022-07705 CVE-2022-23653 · GHSA-8wr4-2wm6-w3pr

B2 Command Line Tool TOCTOU application key disclosure

Priority LOW 21

B2 Command Line Tool is the official command line tool for the backblaze cloud storage service.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0021 Published 2022-02-23 Fixed in 3.2.1 CWE-367
TI-2022-07703 CVE-2022-23651 · GHSA-p867-fxfr-ph2w

b2-sdk-python TOCTOU application key disclosure

Priority LOW 21

b2-sdk-python is a python library to access cloud storage provided by backblaze.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00217 Published 2022-02-23 Fixed in 1.14.1 CWE-367
Open these records in search →