Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior

Críticas / altas1356▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior

132 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-41952	Aplazada	Alta (7.8)	0.16%	—	Acronis Devicelock DLP^AI Acronis Cyber Protect Cloud Agent^AI	29/4/2026	17/6/2026	Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
CVE-2026-41220	Aplazada	Alta (7.8)	0.16%	—	Acronis Devicelock DLP^AI Acronis Cyber Protect Cloud Agent^AI	29/4/2026	17/6/2026	Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
CVE-2026-28727	Modificada	Alta (7.8)	0.15%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
CVE-2026-28726	Analizada	Media (4.3)	0.28%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28725	Analizada	Media (5.5)	0.16%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28724	Analizada	Media (4.3)	0.28%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28723	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28722	Analizada	Alta (7.3)	0.16%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28721	Analizada	Alta (7.3)	0.16%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28720	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28719	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28718	Analizada	Alta (7.5)	0.64%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28717	Analizada	Media (5)	0.13%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28716	Analizada	Media (4.4)	0.14%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28715	Analizada	Media (6.5)	0.36%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28714	Analizada	Media (4.8)	0.19%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28713	Analizada	Alta (7.1)	0.29%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.
CVE-2026-28712	Analizada	Media (6.3)	0.13%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28711	Analizada	Media (6.3)	0.13%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28710	Analizada	Crítica (9.8)	0.63%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28709	Analizada	Media (4.3)	0.27%	—	Acronis Cyber Protect	6/3/2026	17/6/2026	Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2025-30413	Analizada	Media (4.4)	0.16%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
CVE-2025-11791	Analizada	Alta (7.1)	0.10%	—	Acronis Agent Acronis Cyber Protect	6/3/2026	17/6/2026	Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.
CVE-2025-30416	Analizada	Crítica (10)	0.46%	—	Acronis Cyber Protect	20/2/2026	17/6/2026	Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
CVE-2025-30412	Analizada	Crítica (10)	0.71%	—	Acronis Cyber Protect	20/2/2026	17/6/2026	Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.