High severityNVD Advisory· Published Sep 1, 2026· Updated Sep 11, 2026
CVE-2026-19820
CVE-2026-19820
Description
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows OS security controls. This vulnerability is due to improper link resolution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
5- ZDI-26-626: Backblaze Personal Computer Backup bzfilelist Link Following Denial-of-Service VulnerabilityZero Day Initiative · Sep 9, 2026
- ZDI-26-625: Backblaze Personal Computer Backup bzserv Link Following Denial-of-Service VulnerabilityZero Day Initiative · Sep 9, 2026
- ZDI-26-627: Backblaze Personal Computer Backup bztransmit Link Following Denial-of-Service VulnerabilityZero Day Initiative · Sep 9, 2026
- ZDI-26-628: Backblaze Personal Computer Backup bzreports Link Following Denial-of-Service VulnerabilityZero Day Initiative · Sep 9, 2026
- ZDI-26-624: Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service VulnerabilityZero Day Initiative · Sep 9, 2026