#case-study

CVE-2026-18759: Privilege Escalation in ASUSTOR Backup Plan

ASUSTOR Backup Plan’s Windows service ABP_VSS_Service treats encryption as authentication and checks paths with a substring test. Standard user to SYSTEM.