CVE-2026-51831
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
In IDrive Backup for Windows version 7.0.1.1 and below, a local attacker can execute arbitrary code via the id_service.exe component. This is remediated in version 7.0.1.2.
Risk Assessment
A local attacker with system access can exploit the id_service.exe component to execute arbitrary code, potentially leading to privilege escalation or further compromise.
Recommendation
Update IDrive Backup for Windows to version 7.0.1.2 or later. Restrict local access to systems with the software installed.
Other vulnerabilities in IDrive Backup for Windows
Original NVD description (English source)
An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component
Vulnerability data from NVD (NIST) · CISA KEV · EPSS