Vinchin Backup & Recovery up to 9.0.0.86562 Module Handshake ModuleHandShake _listen_uuid stack-based overflow

Summaryinfo

A vulnerability, which was classified as very critical, has been found in Vinchin Backup & Recovery up to 9.0.0.86562. This affects the function ModuleHandShake of the component Module Handshake. This manipulation of the argument _listen_uuid causes stack-based overflow. This vulnerability appears as CVE-2026-60095. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability has been found in Vinchin Backup & Recovery up to 9.0.0.86562 and classified as very critical. Affected by this vulnerability is the function ModuleHandShake of the component Module Handshake. The manipulation of the argument _listen_uuid with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlink_server service that allows unauthenticated remote attackers to overwrite the saved return address by supplying an oversized _listen_uuid field that is measured via strlen() and copied without bounds checking into a fixed-length stack buffer using strcpy(). Attackers can send a crafted request with a malicious _listen_uuid value to corrupt the stack and achieve process crash or potential control flow hijack without requiring authentication.

It is possible to read the advisory at code-white.com. This vulnerability is known as CVE-2026-60095 since 07/08/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/09/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Backup Software

Vendor

• Vinchin

Name

• Backup & Recovery

Version

• 9.0.0.86562

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion