Cleartext storage of sensitive information in Backup & Replication - CVE-2026-58070
Published: August 25, 2026
Vulnerability identifier: #VU145353
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-58070
CWE-ID: CWE-312
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to cleartext storage of sensitive information in guest machine logs when performing application aware processing. A local user can read logged guest OS credentials to disclose sensitive information.
The issue affects guest OS credentials used for application aware processing and the credentials are recorded on the guest machine.
Affected software
Backup & Replication
How to mitigate CVE-2026-58070
Install security update from vendor's website.
Backup & Replication - addressed in versions 13.0.3.63, 13.1.0.411