Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

325 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-30408	Aplazada	Media (6.7)	0.17%	—	Acronis Cyber Protect Cloud Agent^AI Acronis Cyber Protect 16^AI	24/4/2025	17/6/2026	Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39904, Acronis Cyber Protect 16 (Windows) before build 39938.
CVE-2025-30407	Aplazada	Media (6.3)	0.13%	—	Acronis Cyber Protect Cloud Agent^AI	26/3/2025	17/6/2026	Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39713.
CVE-2025-24832	Aplazada	Media (5.5)	0.19%	—	Acronis Backup Plugin FOR Cpanel AND WHM^AI Acronis Backup Extension FOR Plesk^AI	27/2/2025	17/6/2026	Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux)…
CVE-2025-24831	Aplazada	Media (6.6)	0.19%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24830	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24829	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24828	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24827	Aplazada	Media (6.3)	0.14%	—	Acronis Cyber Protect Cloud Agent^AI	31/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVE-2025-24826	Aplazada	Media (6.7)	0.12%	—	Acronis Snap Deploy^AI	28/1/2025	17/6/2026	Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4625.
CVE-2024-56414	Aplazada	Media (5.5)	0.11%	—	Acronis Cyber Protect^AI	2/1/2025	17/6/2026	Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-56413	Aplazada	Media (6.1)	0.23%	—	Acronis Cyber Protect 16^AI	2/1/2025	17/6/2026	Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-55543	Analizada	Alta (7.8)	0.17%	—	Acronis Cyber Protect	2/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-55542	Aplazada	Media (4.4)	0.17%	—	Acronis Cyber Protect 16^AI Acronis Cyber Protect Cloud Agent^AI	2/1/2025	17/6/2026	Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895.
CVE-2024-55541	Analizada	Media (6.1)	0.29%	—	Acronis Cyber Protect	2/1/2025	17/6/2026	Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169.
CVE-2024-55540	Analizada	Alta (7.8)	0.17%	—	Acronis Cyber Protect	2/1/2025	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-55538	Aplazada	Media (4)	0.18%	—	Acronis True Image^AI Acronis True Image OEM^AI	2/1/2025	17/6/2026	Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build 41725, Acronis True Image (Windows) before build 41736, Acronis True Image OEM (macOS) before build 42571, Acronis True Image OEM (Windows) before build 42575.
CVE-2024-49385	Aplazada	Media (5.5)	0.15%	—	Acronis True Image^AI Acronis True Image OEM^AI	2/1/2025	17/6/2026	Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 41736, Acronis True Image OEM (Windows) before build 42575.
CVE-2024-55539	Aplazada	Baja (2.5)	0.11%	—	Acronis Cyber Protect Cloud Agent^AI Acronis Cyber Protect^AI	23/12/2024	17/6/2026	Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185, Acronis Cyber Protect 16 (Linux) before build 39938.
CVE-2024-42449	Aplazada	Alta (7.1)	5.8%	—	Acronis Vspc^AI Acronis Management Agent^AI	4/12/2024	17/6/2026	From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbitrary files on the VSPC server machine.
CVE-2024-34015	Aplazada	Baja (3.3)	0.21%	—	Acronis Backup Plugin FOR Cpanel AND WHM^AI	11/11/2024	17/6/2026	Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892.
CVE-2024-34014	Aplazada	Media (5.5)	0.20%	—	Acronis Backup Plugin FOR Cpanel AND WHM^AI Acronis Backup Extension FOR Plesk^AI Acronis Backup Plugin FOR Directadmin^AI	11/11/2024	17/6/2026	Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build…
CVE-2024-43154	Aplazada	Media (4.3)	0.39%	—	Bracketspace Advanced Cron Manager^AI	1/11/2024	17/6/2026	Missing Authorization vulnerability in BracketSpace Advanced Cron Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Cron Manager – debug & control: from n/a through 2.5.9.
CVE-2024-49392	Analizada	Media (4.8)	0.23%	—	Acronis Cyber Files	17/10/2024	17/6/2026	Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.
CVE-2024-49391	Analizada	Alta (7.3)	0.14%	—	Acronis Cyber Files	17/10/2024	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.
CVE-2024-49390	Analizada	Alta (7.3)	0.16%	—	Acronis Cyber Files	17/10/2024	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.