{"id":"CVE-2026-86828","revision":"d1bb8a14a46e46d2b387052eafc85b67","records":[{"revision":"d1bb8a14a46e46d2b387052eafc85b67","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-86828","aliases":[],"title":"BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback","description":"The BackWPup  WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.","state":0,"publishedAt":"2026-10-08T06:00:08.185+00:00","modifiedAt":"2026-10-08T10:59:18.107+00:00","affected":[{"ecosystem":"Vendor product","name":"BackWPup","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"BackWPup\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.7.7\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://wpscan.com/vulnerability/be8c0eab-1874-4490-b94e-394f62a522f3/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86828","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-86828","identifiers":["CVE-2026-86828"]},"retained":false,"historicalAffected":[]}],"coverage":[]}