CVE-2022-50923

HIGH

Cobian Backup 0.9 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-50923. PoCs published by Hejap Zairy Al-Sharif.

AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in Cobian Backup 0.9. The exploit leverages the lack of quotes around the service path to potentially execute arbitrary code with elevated privileges if a malicious executable is placed in the system root path.

Description

Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions during service startup.

Exploits (1)

exploitdb WRITEUP
by Hejap Zairy Al-Sharif · textlocalwindows
https://www.exploit-db.com/exploits/50810

This is a writeup describing an unquoted service path vulnerability in Cobian Backup 0.9. The exploit leverages the lack of quotes around the service path to potentially execute arbitrary code with elevated privileges if a malicious executable is placed in the system root path.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Moderate
Reliability
Theoretical
Target: Cobian Backup 0.9.93
Auth required
Prerequisites: Local access to the system · Ability to place an executable in the system root path
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/50810
Various Sources product
https://www.cobiansoft.com//

Scores

CVSS v3 7.8
EPSS 0.0019
EPSS Percentile 9.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (1)
cobiansoft/cobian_backup 0.9.93
Published Jan 13, 2026
Tracked Since Feb 18, 2026