NAKIVO Backup & Replication Director

• CVE-2024-48248 High 8.6 Exploited NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because P 94.4%
• CVE-2025-32406 High 8.6 An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response. 0.5%