CVE-2025-62839
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, it could allow remote attackers to compromise the security of the system.
Risk Assessment
A remote attacker could exploit the exposed key to compromise data confidentiality or integrity and the security of the system.
Recommendation
Update HBS 3 Hybrid Backup Sync to version 26.4.0.521 or later and Hybrid Backup Sync to version 26.4.1.563 or later.
Other vulnerabilities in HBS 3 Hybrid Backup Sync
See all- CVE-2025-62841High
A use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, it could allow remote attackers to compromise the security of the system.
- CVE-2025-62840Low
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can exploit the vulnerability to read application data. The vulnerability has been fixed in version 26.2.0.938 and later.
Original NVD description (English source)
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.0.521 and later Hybrid Backup Sync 26.4.1.563 and later
Vulnerability data from NVD (NIST) · CISA KEV · EPSS