Remote Code Execution Vulnerability in AOMEI Cyber Backup

CVE-2025-8611

What is CVE-2025-8611?

AOMEI Cyber Backup contains a vulnerability that permits remote attackers to execute arbitrary code without any form of authentication. This flaw is primarily located in the DaoService service, which operates on TCP port 9074 by default. The absence of authentication mechanisms grants malicious parties access to critical functions, allowing them to run code in the context of the SYSTEM account, leading to potential unauthorized control over the affected systems. Organizations using AOMEI Cyber Backup should address this vulnerability promptly to safeguard sensitive data and system integrity.

References