CVE-2025-62840
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can exploit the vulnerability to read application data. The vulnerability has been fixed in version 26.2.0.938 and later.
Risk Assessment
An attacker with local network access could read sensitive application data, potentially leading to information disclosure and further attacks.
Recommendation
Update HBS 3 Hybrid Backup Sync to version 26.2.0.938 or later to eliminate the vulnerability.
Other vulnerabilities in HBS 3 Hybrid Backup Sync
See all- CVE-2025-62841High
A use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, it could allow remote attackers to compromise the security of the system.
- CVE-2025-62839High
A use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, it could allow remote attackers to compromise the security of the system.
Original NVD description (English source)
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.2.0.938 and later
Vulnerability data from NVD (NIST) · CISA KEV · EPSS