CVE-2026-19820
HIGH
7,8
Source: 4ac701fe-44e9-4bcd-9585-dd6449257611
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
Description
AI Translation Available
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows OS security controls. This vulnerability is due to improper link resolution.
https://www.backblaze.com/computer-backup/docs/backup-client-release-notes-wind…
https://www.backblaze.com/status/update