Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-04 | 2 | Disclosure2 |
| 2026-05-15 | 1 | Disclosure1 |
CVE-2026-29200 A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administ… https://www.cve.org/CVERecord?id=CVE-2026-29200
Post summary
The text announces a critical IDOR vulnerability in Comet Backup across multiple versions, but lacks PoC, exploit, or mitigation details.
A critical IDOR vulnerability (CVE-2026-29200) affects Comet Backup versions 20.11.0 to 26.1.1 and 26.2.1, risking tenant impersonation via API. Review and update your backup software promptly to protect sensitive data. #cybersecurity
Post summary
A new IDOR vulnerability (CVE-2026-29200) in Comet Backup is announced with affected versions and implications, advising users to update but providing no PoC, exploit, or active exploitation evidence.
CVE-2026-29200 Critical IDOR Vulnerability in Comet Backup Allows Cross-Tenant Account Impersonation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29200
Post summary
The text announces CVE‑2026‑29200, a critical IDOR flaw in Comet Backup that can enable cross‑tenant account impersonation, but it provides no proof‑of‑concept, exploit code, or mitigation details.