Cve-2026-112174 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/cve-2026-112174/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 22:07:17 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIperius Backup: Local privilege escalation (CVE-2026-112174)https://feed.craftedsignal.io/briefs/2026-11-iperius-backup-lpe-cve-2026-112174/Wed, 11 Nov 2026 22:07:17 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-iperius-backup-lpe-cve-2026-112174/Iperius Backup 8.8.3 and earlier is vulnerable to local privilege escalation where a low-privileged attacker can abuse native Windows dialogs to execute commands with elevated SYSTEM or Administrator privileges.Iperius Backup versions up to 8.8.3 contain a local privilege escalation vulnerability (CVE-2026-112174) due to improper isolation of native Windows dialogs. When the Iperius Backup service operates with administrative or SYSTEM privileges, it exposes dialogs that a local, low-privileged user can manipulate to execute arbitrary programs. This results in the inherited elevation of the malicious process. A proof of concept has been published by researchers, confirming the viability of the attack.

Impact

Successful exploitation allows a local user with minimal privileges to gain SYSTEM or Administrator-level execution rights on the host, potentially leading to full system compromise.

Recommendation

  • Upgrade all instances of Iperius Backup to version 8.8.9 or later, which enforces restrictive permissions on configuration folders and prevents unauthorized interaction with backup service tasks.
  • Inventory systems running vulnerable versions of Iperius Backup via EDR or asset management tools.
  • Monitor for unauthorized modification of backup jobs or service-related folders by standard user accounts.
]]>highadvisorylocal-privilege-escalationcve-2026-112174windows