What’s Vulnerable › Vulnerabilities

CVE-2022-36617

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-09 · updated 2026-06-17
• Weakness: CWE-522

Description

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.

Affected products

• Haystacksoftware Arq Backup: through 7.19.5.0

References

• https://startrekdude.github.io/arqbackup.html
• https://www.arqbackup.com/download/arqbackup/arq7windows_release_notes.html
• https://startrekdude.github.io/arqbackup.html
• https://www.arqbackup.com/download/arqbackup/arq7windows_release_notes.html

Get alerted when CVE-2022-36617 or the next vulnerability affects your stack