CVE-2022-50688

HIGH

Cobian Backup Gravity 11.2.0.582 - Code Injection

Title source: llm

Description

Cobian Backup Gravity 11.2.0.582 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the CobianBackup11 service to inject malicious code that would execute with LocalSystem privileges during service startup.

Exploits (1)

exploitdb WRITEUP

by Luis Martínez · textlocalwindows

https://www.exploit-db.com/exploits/50791

View Code ZIP pw:eip

References (3)

[Various Sources] https://www.cobiansoft.com/

[Third Party Advisory] https://www.vulncheck.com/advisories/cobian-backup-gravity-unquoted-service-path-privilege-escalation

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/50791

Scores

CVSS v3 8.4

EPSS 0.0002

EPSS Percentile 4.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-428

Status draft

Timeline

Published Dec 22, 2025

Tracked Since Feb 18, 2026