HIGH 7.0 NVD

CVE-2026-76159

Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileg

Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escalate privileges to NT AUTHORITY\SYSTEM via an attacker-controlled preload.json file.

References

https://zuso.ai/advisory/

Published: 2026-09-15 · Source: NVD · Feed updated: 2026-09-15

This high severity vulnerability with a CVSS score of 7.0 was published on 2026-09-15 via NVD.

vulnfeed aggregates 13549 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.