CVE-2026-60039 is a vulnerability that allows a high privileged remote attacker to perform code injection via the backend's backup restore function. Successful exploitation can lead to code execution, resulting in complete loss of confidentiality, integrity, and availability of the affected system.