Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-15	CVE-2024-49388	Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 16 Sensitive information manipulation due to improper authorization. network low complexity acronis CWE-639 critical	9.1
2024-07-24	CVE-2023-45249	Improper Authentication vulnerability in Acronis Cyber Infrastructure Remote command execution due to use of default passwords. network low complexity acronis CWE-287 critical	9.8
2023-10-04	CVE-2023-44208	Missing Authorization vulnerability in Acronis Cyber Protect Home Office Sensitive information disclosure and manipulation due to missing authorization. network low complexity acronis CWE-862 critical	9.1
2023-09-27	CVE-2023-44152	Missing Authentication for Critical Function vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure and manipulation due to improper authentication. network low complexity acronis CWE-306 critical	9.1
2023-09-27	CVE-2023-44206	Authorization Bypass Through User-Controlled Key vulnerability in Acronis Cyber Protect 15 Sensitive information disclosure and manipulation due to improper authorization. network low complexity acronis CWE-639 critical	9.1
2023-08-31	CVE-2023-41746	Improper Input Validation vulnerability in Acronis Cloud Manager Remote command execution due to improper input validation. network low complexity acronis CWE-20 critical	9.8
2023-08-31	CVE-2023-41748	Improper Input Validation vulnerability in Acronis Cloud Manager Remote command execution due to improper input validation. network low complexity acronis CWE-20 critical	9.8