CVE detail
CVE-2026-26225
Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated privileges. By crafting a malicious serialized task file, a local attacker can trigger arbitrary file writes to sensitive system locations, leading to privilege escalation to root.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://www.vulncheck.com/advisories/intego-personal-backup-task-file-privilege-escalationwww.vulncheck.com
No excerpt available.
Exploitwww.vulncheck.comFeb 12, 2026, 10:16 PM - https://www.intego.com/bootable-mac-backupswww.intego.com
No excerpt available.
referencewww.intego.comFeb 12, 2026, 10:16 PM - https://www.intego.com/www.intego.com
No excerpt available.
referencewww.intego.comFeb 12, 2026, 10:16 PM - https://integosupport.zendesk.com/hc/en-us/articles/40945636077467-Personal-Backup-X9-Release-Notesintegosupport.zendesk.com
No excerpt available.
referenceintegosupport.zendesk.comFeb 12, 2026, 10:16 PM - https://blog.quarkslab.com/intego_lpe_macos_1.htmlblog.quarkslab.com
No excerpt available.
referenceblog.quarkslab.comFeb 12, 2026, 10:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-65069CVSS 4.0 · Medium
Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in dsu.h with o…
- CVE-2026-65068CVSS 3.8 · Low
Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sphash.h wit…
- CVE-2026-65067CVSS 3.8 · Low
Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in intern.h with ope…
- CVE-2026-65066CVSS 3.8 · Low
Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in ring.h with o…
- CVE-2026-65065CVSS N/A · Unrated
Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in roaring.h…
- CVE-2026-65064CVSS 3.8 · Low
Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in shm_generic.h wi…