Vulnerabilidades do Acronis Cyber Protect
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Acronis Cyber Protect: 24 registro(s), com versões afetadas e correções.cpe:2.3:a:acronis:cyber_protect
CVE-2026-28727
Alta · 7.8
CWE-276 05/03/2026
Incorrect Default Permissions em Acronis Agent
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
CVE-2026-28726
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28725
Média · 5.5
CWE-732 05/03/2026
Incorrect Permission Assignment for Critical Resource em Acronis Cyber Protect
Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28724
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28723
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28722
Alta · 7.3
CWE-610 05/03/2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28721
Alta · 7.3
CWE-610 05/03/2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28720
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28719
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28718
Alta · 7.5
CWE-779 05/03/2026
Denial of service due to insufficient input validation in authentication logging. The…
Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28717
Média · 5.0
CWE-276 05/03/2026
Incorrect Default Permissions em Acronis Cyber Protect
Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28716
Média · 4.4
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28715
Média · 6.5
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28714
Média · 4.8
CWE-522 05/03/2026
Insufficiently Protected Credentials em Acronis Cyber Protect
Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28713
Alta · 7.1
CWE-1392 05/03/2026
Default credentials set for local privileged user in Virtual Appliance. The following…
Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.
CVE-2026-28712
Média · 6.3
CWE-427 05/03/2026
Uncontrolled Search Path Element em Acronis Cyber Protect
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28711
Média · 6.3
CWE-427 05/03/2026
Uncontrolled Search Path Element em Acronis Cyber Protect
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28710
Crítica · 9.8
CWE-1390 05/03/2026
Sensitive information disclosure and manipulation due to improper authentication. The…
Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28709
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2025-30413
Média · 4.4
CWE-732 05/03/2026
Incorrect Permission Assignment for Critical Resource em Acronis Agent
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
CVE-2025-11791
Alta · 7.1
CWE-862 05/03/2026
Missing Authorization em Acronis Agent
Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.
CVE-2025-30416
Crítica · 10.0
CWE-862 19/02/2026
Missing Authorization em Acronis Cyber Protect
Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
CVE-2025-30412
Crítica · 10.0
CWE-1390 19/02/2026
Sensitive data disclosure and manipulation due to improper authentication. The following…
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
CVE-2025-30411
Crítica · 10.0
CWE-1390 19/02/2026
Sensitive data disclosure and manipulation due to improper authentication. The following…
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.