Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2696▼ 543 respecto a la semana anterior
Críticas / altas1264▼ 228 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)262▼ 241 respecto a la semana anterior
132 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.5) | 0.17% | — | Acronis Cyber Protect | 15/10/2024 | 17/6/2026 | Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. | |
| Analizada | Media (4.3) | 0.22% | — | Acronis Cyber Protect | 15/10/2024 | 17/6/2026 | Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. | |
| Analizada | Media (4.3) | 0.22% | — | Acronis Cyber Protect | 15/10/2024 | 17/6/2026 | Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. | |
| Analizada | Media (4.3) | 0.22% | — | Acronis Cyber Protect | 15/10/2024 | 17/6/2026 | Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. | |
| Aplazada | Media (4.7) | 0.14% | — | Acronis Cyber Protect Cloud AgentAI | 23/9/2024 | 17/6/2026 | Local active protection service settings manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows, macOS) before build 38565. | |
| Aplazada | Media (6.7) | 0.14% | — | Acronis Cyber Protect Cloud AgentAIAcronis Cyber Protect 16AI | 16/9/2024 | 17/6/2026 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235, Acronis Cyber Protect 16 (Windows) before build 39169. | |
| Aplazada | Media (6.5) | 0.17% | — | Acronis Cyber Protect Cloud AgentAI | 16/9/2024 | 17/6/2026 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235. | |
| Analizada | Media (6.5) | 0.37% | — | Acronis Cyber Protect | 16/7/2024 | 17/6/2026 | Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984. | |
| Aplazada | Media (6.8) | 0.15% | — | Acronis Cyber Protect Cloud AgentAI | 29/4/2024 | 17/6/2026 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758. | |
| Aplazada | Alta (8.2) | 0.20% | — | Acronis Cyber Protect Cloud AgentAIAcronis Cyber Protect 16AIAcronis True ImageAIAcronis True Image OEMAI | 29/4/2024 | 17/6/2026 | Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before… | |
| Aplazada | Alta (7.1) | 0.16% | — | Acronis Cyber Protect Cloud AgentAIAcronis Cyber ProtectAI | 29/4/2024 | 17/6/2026 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186. | |
| Aplazada | Alta (7.1) | 0.16% | — | Acronis Cyber Protect Cloud AgentAIAcronis Cyber Protect 16AI | 29/4/2024 | 17/6/2026 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169. | |
| Analizada | Media (5.4) | 0.33% | — | Acronis Cyber Protect | 27/2/2024 | 17/6/2026 | Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. | |
| Analizada | Media (6.1) | 0.30% | — | Acronis Cyber Protect | 27/2/2024 | 17/6/2026 | Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. | |
| Analizada | Media (5.5) | 0.17% | — | Acronis Cyber Protect | 27/2/2024 | 17/6/2026 | Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windows) before build 37391. | |
| Analizada | Media (5.4) | 0.26% | — | Acronis Cyber Protect | 27/2/2024 | 17/6/2026 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. | |
| Analizada | Media (5.5) | 0.16% | — | Acronis Cyber Protect | 27/2/2024 | 17/6/2026 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. | |
| Modificada | Alta (7.8) | 0.25% | — | Acronis Cyber Protect Home Office | 12/12/2023 | 17/6/2026 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows)… | |
| Modificada | Crítica (9.1) | 0.37% | — | Acronis Cyber Protect Home Office | 4/10/2023 | 17/6/2026 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575. | |
| Modificada | Media (5.4) | 0.63% | — | Acronis Cyber Protect | 27/9/2023 | 17/6/2026 | Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. | |
| Modificada | Crítica (9.1) | 1.0% | — | Acronis Cyber Protect | 27/9/2023 | 17/6/2026 | Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. | |
| Modificada | Media (5.3) | 0.72% | — | Acronis Cyber Protect | 27/9/2023 | 17/6/2026 | Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. | |
| Modificada | Media (6.5) | 0.29% | — | Acronis Cyber Protect | 27/9/2023 | 17/6/2026 | Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. | |
| Modificada | Media (6.5) | 0.29% | — | Acronis Cyber Protect | 27/9/2023 | 17/6/2026 | Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. | |
| Modificada | Alta (7.5) | 0.67% | — | Acronis Cyber Protect | 27/9/2023 | 17/6/2026 | Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. |