Nakivo
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Nakivo product.
RSS Feeds for Nakivo security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Nakivo products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Nakivo Sorted by Most Security Vulnerabilities since 2018
Known Exploited Nakivo Vulnerabilities
The following Nakivo vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| NAKIVO Backup and Replication Absolute Path Traversal Vulnerability |
NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files. CVE-2024-48248 Exploit Probability: 94.0% |
March 19, 2025 |
The vulnerability CVE-2024-48248: NAKIVO Backup and Replication Absolute Path Traversal Vulnerability is in the top 1% of the currently known exploitable vulnerabilities.
By the Year
In 2026 there have been 0 vulnerabilities in Nakivo. Last year, in 2025 Nakivo had 1 security vulnerability published. Right now, Nakivo is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 1 | 8.60 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 1 | 9.80 |
It may take a day or so for new Nakivo vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Nakivo Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2024-48248 | Mar 04, 2025 |
Path Traversal in NAKIVO Backup<11.0.0.88174 RCENAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials). |
Backup Replication Director
|
| CVE-2020-15851 | Sep 24, 2020 |
Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories. |
Backup Replication Transporter
|