CVE-2026-2627
Softland FBackup Backup/Restore HID.dll link following
- State
- Published
- Severity
- 8.5 High
- Published
- Feb 17, 2026
- Updated
- Feb 23, 2026
- Reserved
- Feb 17, 2026
Description
A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\Program Files\Common Files\microsoft shared\ink\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
- CWE-59 Link Following
Affected Products
| Product | Versions |
|---|---|
FBackupSoftland |
|
References
- VDB-346279 | Softland FBackup Backup/Restore HID.dll link followingvdb-entry
- VDB-346279 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #752050 | SOFTLAND FBackup 9.9 Link Followingthird-party-advisory
- https://github.com/thezdi/PoC/tree/main/FilesystemEoPsexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.