Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.Referenceshttps://seclists.org/fulldisclosure/2024/Jan/30https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/