CVE-2023-48679: Acronis Cyber Protect

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.

Affected products

• Acronis Cyber Protect: before 16 (fixed in 16)

Published 2024-02-27. Last modified 2026-06-17.