| Summary | A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call. |
|---|---|
| Publication Date | May 4, 2026, 4:16 p.m. |
| Registration Date | May 5, 2026, 4:06 a.m. |
| Last Update | May 4, 2026, 4:16 p.m. |