Local Privilege Escalation in Iperius Backup by Iperius

CVE-2026-112174

What is CVE-2026-112174?

The local privilege escalation vulnerability in Iperius Backup 8.8.3 is rooted in the inadequate separation between the graphical user interface, which operates with elevated privileges, and the local users who have low privileges. This flaw allows a local attacker, when the backup service is set to run constantly with Administrator privileges, to leverage the exposed Windows dialogues provided by the application. As a result, they can execute commands inheriting the application's elevated context, thus gaining SYSTEM or Administrator privileges and compromising the integrity of the affected Windows system.

References