Vulnerabilidades en Acronis

193 resultados
Análisis Vexday

Com 192 CVEs catalogadas, o portfólio de vulnerabilidades da Acronis apresenta uma taxa de exploração ativa acima da média geral do catálogo CISA KEV — proporção 1,2 vezes superior ao índice de referência —, o que indica atenção redobrada para equipes de resposta a incidentes. A CVE mais crítica em exploração confirmada é a CVE-2023-45249, com score EPSS de 0,5354, sugerindo probabilidade relevante de tentativas de exploração observadas em ambiente real. O tipo de falha mais recorrente é CWE-427 (uncontrolled search path element), classe que frequentemente permite escalonamento de privilégios ou execução de código por meio de dependências mal controladas. As 11 CVEs surgidas nos últimos 90 dias e as 8 de severidade crítica reforçam a necessidade de ciclos de patching ágeis para produtos Acronis em ambientes corporativos.

CVE-2026-42061HIGHLocal privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLockEPSS 0.1%CVE-2026-44609HIGHLocal privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before EPSS 0.1%CVE-2026-28727HIGHLocal privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) beEPSS 0.1%CVE-2026-0705MEDIUMLocal privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before bEPSS 0.1%CVE-2026-28728MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before builEPSS 0.1%CVE-2026-27774MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before builEPSS 0.1%CVE-2025-11791MEDIUMSensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis CybEPSS 0.1%CVE-2026-28716MEDIUMInformation disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 EPSS 0.1%CVE-2026-28712MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) beforEPSS 0.1%CVE-2026-28711MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) beforEPSS 0.1%CVE-2026-25852MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before EPSS 0.1%CVE-2026-33271MEDIUMLocal privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before builEPSS 0.1%CVE-2025-48960MEDIUMWeak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build EPSS 0.1%