This vulnerability (CVE-2026-39480) affects Inisev Backup Migration software versions <=2.1.1. It involves the unauthenticated insertion of sensitive information into data sent during backup migration processes, leading to sensitive data exposure. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact. There is no confirmed remediation or patch available from the vendor at this time.

An unauthenticated attacker can exploit this vulnerability to gain access to sensitive information transmitted by the Backup Migration software, potentially compromising confidentiality. There is no impact on integrity or availability reported. The exposure of sensitive data could lead to further security risks depending on the nature of the data exposed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the Backup Migration service and monitor for unusual data transmissions. Avoid exposing the service to untrusted networks. Follow vendor communications for updates on patches or official mitigations.