Vulnerability record · CVE-2023-26258 · published 3 July 2023

CVE-2023-26258: Arcserve udp incorrect authorization vulnerability

Arcserve · Udp

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute any task as administrator.

9.8 CVSS 3.1 Critical EPSS 40% · top 1.4% CWE-863 · Incorrect authorization

9.8CVSS 3.1 base score

40%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Udp Arcserve

References

Link	Tags
https://support.arcserve.com/s/article/KB000015720?language=en_US
https://www.arcserve.com/products/arcserve-udp	Product
https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/	ExploitTechnical DescriptionThird Party Advisory
https://support.arcserve.com/s/article/KB000015720?language=en_US
https://www.arcserve.com/products/arcserve-udp	Product
https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/	ExploitTechnical DescriptionThird Party Advisory

Track CVE-2023-26258 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2015-4068Arcserve UDP servlet path traversal exposes files and causes DoSArcserve UDP before 5.0 Update 4 contains a directory traversal flaw in the reportFileServlet and exportServlet servlets. A crafted file path lets a …KEVEPSS 64%analysed29 May 2015 9.8CVE-2024-0799Arcserve udp improper authentication vulnerabilityAn authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app…EPSS 4.3%13 Mar 2024 9.8CVE-2023-42000Arcserve udp path traversal vulnerabilityArcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthentic…EPSS 1.5%27 Nov 2023 9.8CVE-2023-41998Arcserve udp unrestricted file upload vulnerabilityArcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows …EPSS 15%27 Nov 2023 9.8CVE-2023-41999Arcserve udp improper authentication vulnerabilityAn authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifie…EPSS 1.4%27 Nov 2023 9.2CVE-2025-34522Arcserve udp heap-based buffer overflow vulnerabilityA heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be triggered wi…EPSS 0.56%27 Aug 2025 9.2CVE-2025-34523Arcserve udp heap-based buffer overflow vulnerabilityA heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection (UDP). This flaw …EPSS 0.53%27 Aug 2025 8.8CVE-2024-0800Arcserve udp unrestricted file upload vulnerabilityA path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.ser…EPSS 1.0%13 Mar 2024

Source: NIST National Vulnerability Database (record CVE-2023-26258), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.