CVE-2026-104476

{
  "etk_id": "ETK-2026-456",
  "cve_id": "CVE-2026-104476",
  "display_id": "CVE-2026-104476",
  "ghsa_id": "GHSA-62pf-58wj-9727",
  "euvd_id": "EUVD-2026-91852",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated configuration archive disclosure in Backdrop CMS",
  "summary": "Backdrop CMS versions before 1.35.1 may expose configuration export archives left on the server after transfer. An unauthenticated attacker could retrieve these archives and access site configuration, including sensitive settings. Exposure depends on export archives having been left on the server.",
  "mitigation": "Upgrade Backdrop CMS to version 1.35.1 or later. Remove any retained configuration export archives from web-accessible server locations.",
  "vendor": "backdrop",
  "product": "Backdrop",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 1.35.1"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.35.1"
      ],
      "package_name": "backdrop",
      "purl": null
    }
  ],
  "cwes": [
    200
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.0029,
  "epss_percentile": 0.2039,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 17.461207883333334,
  "t0_at": "2026-10-02T23:28:46.804000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-03T13:56:43.532875+00:00",
      "days": 0.6027399175347222,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T23:28:46.804000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-02T23:28:46.804000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T23:28:46.804000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104476"
    }
  }
}