Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

NAKIVO vulnerabilities

2 published CVEs name NAKIVO among the affected products; CISA lists 1 of them as exploited in the wild.

Published CVEs
2
Last 12 months
0
Critical
0
Known exploited
1

Critical 0High 2Medium 0Low 0Not scored 0

Known exploitedNewest addition to KEV first

  • CVE-2024-48248

    NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code…

    NAKIVO · Backup & Replication Director

    ExploitedHigh8.6

Newest CVEs

  • CVE-2025-32406

    An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML…

    NAKIVO · Backup & Replication Director

    High8.6
  • CVE-2024-48248

    NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code…

    NAKIVO · Backup & Replication Director

    ExploitedHigh8.6

Products with the most CVEs

  1. Backup & Replication Director2

Most common weaknesses

  1. CWE-36 1
  2. CWE-611 XML external entity (XXE)1