CVE-2024-48248

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files.

CISA Known Exploited Vulnerability

Vendor / Product NAKIVO — Backup and Replication
Date Added 2025-03-19
Remediation Due 2025-04-09
https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm ; https://nvd.nist.gov/vuln/detail/CVE-2024-48248

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
nakivo backup_\&_replication_director < 11.0.0.88174

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

94.36%
Raw Score 0.943560
Percentile 99.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.94356
2026-10-28
0.94356

Intelligence Sources

kev ref →