Skip to content
OpenAdvisories
High · 8.6 CVE-2025-9120 EUVD-2025-207564GHSA-7w2h-4285-9pwr

RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.

Published Feb 24, 2026 · Updated Feb 24, 2026 · Assigned by OpenText

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. 

The vulnerability could be exploited through an open port, potentially allowing unauthorized access.

This issue affects Carbonite Safe Server Backup: through 6.8.3.

Affected products

VendorProductAffectedFixed
OpenText™ Carbonite Safe Server Backup ≤ 6.8.3 —

References