Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-19820

Backblaze Client for Windows Improper Link Resolution Vulnerability

CVSS 4.0 5.8 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-19820

Published

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows OS security controls. This vulnerability is due to improper link resolution.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-19820

Published

Backblaze Client

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Backblaze",
                    "product": "Backblaze Client",
                    "platforms": [
                        "Windows"
                    ],
                    "versions": [
                        {
                            "version": "10.0.0.1029",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "10.0.1.1037",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "10.0.2.1047",
                            "status": "affected",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON