{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/jetbackup/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:jetbackup:jetbackup:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-104068"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=0786BC54-2647-5D7E-AFF1-C5E7C0BD2700\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["JetBackup (\u003c 3.1.24.10)"],"_cs_severities":["high"],"_cs_tags":["wordpress","vulnerability","rce"],"_cs_type":"advisory","_cs_vendors":["JetBackup"],"content_html":"\u003cp\u003eJetBackup for WordPress versions prior to 3.1.24.10 contain a vulnerability where the plugin fails to sanitize symbolic links present within backup archives during the import and restore process. An authenticated WordPress administrator can craft a backup file containing a symlink that points to arbitrary locations on the host filesystem. When processed, the plugin follows these links, allowing the attacker to overwrite sensitive files or write arbitrary content to locations outside the intended restore directory, potentially resulting in server-side code execution.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated administrator to gain arbitrary file write capabilities on the underlying server, which can be leveraged to achieve remote code execution.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the JetBackup plugin for WordPress to version 3.1.24.10 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit administrative user accounts within the WordPress environment to ensure that access is restricted only to trusted personnel, as this vulnerability requires administrator privileges.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs and filesystem activity for suspicious file write attempts or modifications occurring within the WordPress directory structure during manual or automated backup/restore operations.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T22:17:23Z","date_published":"2026-10-22T20:27:41Z","id":"https://feed.craftedsignal.io/briefs/2026-10-jetbackup-symlink-rce/","summary":"The JetBackup WordPress plugin before 3.1.24.10 is vulnerable to an arbitrary file write attack via malicious symbolic links in backup archives, allowing authenticated administrators to achieve remote code execution.","title":"JetBackup for WordPress: Arbitrary file write via symlink (CVE-2026-104068)","url":"https://feed.craftedsignal.io/briefs/2026-10-jetbackup-symlink-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - JetBackup","version":"https://jsonfeed.org/version/1.1"}