Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior

Críticas / altas1381▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior

325 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-33013	Analizada	Alta (8.2)	0.78%	—	Objectcomputing Micronaut	20/3/2026	17/6/2026	Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions prior to both 4.10.16 and 3.10.5 do not correctly handle descending array index order during form-urlencoded body binding in theJsonBeanPropertyBinder::expandArrayToThreshold, which…
CVE-2026-33012	Analizada	Alta (7.5)	0.75%	—	Objectcomputing Micronaut	20/3/2026	17/6/2026	Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions 4.7.0 through 4.10.16 used an unbounded ConcurrentHashMap cache with no eviction policy in its DefaultHtmlErrorResponseBodyProvider. If the application throws an exception whose…
CVE-2026-28727	Modificada	Alta (7.8)	0.15%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
CVE-2026-28726	Analizada	Media (4.3)	0.28%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28725	Analizada	Media (5.5)	0.16%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28724	Analizada	Media (4.3)	0.28%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28723	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28722	Analizada	Alta (7.3)	0.16%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28721	Analizada	Alta (7.3)	0.16%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28720	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28719	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28718	Analizada	Alta (7.5)	0.64%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28717	Analizada	Media (5)	0.13%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28716	Analizada	Media (4.4)	0.14%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28715	Analizada	Media (6.5)	0.36%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28714	Analizada	Media (4.8)	0.19%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28713	Analizada	Alta (7.1)	0.29%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.
CVE-2026-28712	Analizada	Media (6.3)	0.13%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28711	Analizada	Media (6.3)	0.13%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28710	Analizada	Crítica (9.8)	0.63%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28709	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2025-30413	Analizada	Media (4.4)	0.16%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
CVE-2025-11792	Analizada	Alta (7.3)	0.11%	—	Acronis Agent	6/3/2026	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124.
CVE-2025-11791	Analizada	Alta (7.1)	0.10%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.
CVE-2025-11790	Analizada	Media (4.4)	0.12%	—	Acronis Agent	6/3/2026	17/6/2026	Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.