Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

132 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-30411	Analizada	Crítica (10)	0.80%	—	Acronis Cyber Protect	20/2/2026	17/6/2026	Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
CVE-2025-30410	Aplazada	Crítica (9.8)	0.71%	—	Acronis Cyber Protect Cloud Agent^AI Acronis Cyber Protect 16^AI Acronis Cyber Protect 15^AI	20/2/2026	17/6/2026	Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build…
CVE-2025-9578	Aplazada	Alta (7.8)	0.13%	—	Acronis Cyber Protect Cloud Agent^AI	28/8/2025	25/9/2026	Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40734.
CVE-2025-48963	Aplazada	Alta (7.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	28/8/2025	17/6/2026	Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40296.
CVE-2025-48962	Aplazada	Media (4.3)	0.23%	—	Acronis Cyber Protect 16^AI	4/6/2025	17/6/2026	Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 (Windows, Linux) before build 39938.
CVE-2025-48961	Aplazada	Alta (7.3)	0.14%	—	Acronis Cyber Protect 16^AI	4/6/2025	17/6/2026	Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39938.
CVE-2025-48960	Aplazada	Media (5.9)	0.08%	—	Acronis Cyber Protect^AI	4/6/2025	17/6/2026	Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938.
CVE-2025-48959	Aplazada	Media (6.7)	0.13%	—	Acronis Cyber Protect Cloud Agent^AI	4/6/2025	17/6/2026	Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40077.
CVE-2025-30415	Aplazada	Alta (7.5)	0.37%	—	Acronis Cyber Protect Cloud Agent^AI Acronis Cyber Protect^AI	4/6/2025	17/6/2026	Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
CVE-2025-30409	Aplazada	Media (5.5)	0.21%	—	Acronis Cyber Protect Cloud Agent^AI Acronis Cyber Protect 17^AI	24/4/2025	17/6/2026	Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39904, Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2025-30408	Aplazada	Media (6.7)	0.17%	—	Acronis Cyber Protect Cloud Agent^AI Acronis Cyber Protect 16^AI	24/4/2025	17/6/2026	Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39904, Acronis Cyber Protect 16 (Windows) before build 39938.
CVE-2025-30407	Aplazada	Media (6.3)	0.13%	—	Acronis Cyber Protect Cloud Agent^AI	26/3/2025	17/6/2026	Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39713.
CVE-2025-24831	Aplazada	Media (6.6)	0.19%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24830	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24829	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24828	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24827	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2024-56414	Aplazada	Media (5.5)	0.11%	—	Acronis Cyber Protect^AI	2/1/2025	17/6/2026	Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-56413	Aplazada	Media (6.1)	0.23%	—	Acronis Cyber Protect 16^AI	2/1/2025	17/6/2026	Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-55543	Analizada	Alta (7.8)	0.17%	—	Acronis Cyber Protect	2/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-55542	Aplazada	Media (4.4)	0.17%	—	Acronis Cyber Protect 16^AI Acronis Cyber Protect Cloud Agent^AI	2/1/2025	17/6/2026	Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895.
CVE-2024-55541	Analizada	Media (6.1)	0.29%	—	Acronis Cyber Protect	2/1/2025	17/6/2026	Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169.
CVE-2024-55540	Analizada	Alta (7.8)	0.17%	—	Acronis Cyber Protect	2/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-55539	Aplazada	Baja (2.5)	0.11%	—	Acronis Cyber Protect Cloud Agent^AI Acronis Cyber Protect^AI	23/12/2024	17/6/2026	Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185, Acronis Cyber Protect 16 (Linux) before build 39938.
CVE-2024-49388	Analizada	Crítica (9.1)	0.27%	—	Acronis Cyber Protect	15/10/2024	17/6/2026	Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.