Duplicati

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Duplicati records in CISA KEV

No Duplicati vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-13522 CVE-2026-16157 · GHSA-2g48-2hgv-5jpv

Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability

LOW 35

Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0014 Published 2026-07-22 No fix listed CWE-732

TI-2026-53280 CVE-2026-76159 · GHSA-8x3r-pmm8-3j9w

Duplicati for Windows - Incorrect Permission Assignment for Critical Resource

LOW 32

Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escalate privileges to NT AUTHORITY\SYSTEM via…

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00131 Published 2026-09-15 Fixed in v2.4.0.0 CWE-732

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0