Log in Start free

Arcserve

Products

ProductCVEsExploitedLatest
Unified Data Protection (UDP)4–Aug 27, 2025
Arcserve UDP3–Nov 27, 2023
Unified Data Protection3–Mar 13, 2024
D2D1–Jan 20, 2021
UDP Console1–Apr 16, 2026

Exploited and recent CVEs

  • CVE-2026-40118 Medium 6.3 UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to 0.2%
  • CVE-2025-34520 High 7.7 Arcserve UDP < 10.2 Authentication Bypass 0.4%
  • CVE-2025-34521 Medium 4.8 Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS) 0.2%
  • CVE-2025-34522 Critical 9.2 Arcserve UDP < 10.2 Pre-Authentication Heap Overflow 0.6%
  • CVE-2025-34523 Critical 9.2 Arcserve UDP < 10.2 Pre-Authentication Heap Overflow 0.5%
  • CVE-2024-0801 High 7.5 Unauthenticated DoS in Arcserve Unified Data Protection 41.8%
  • CVE-2024-0800 High 8.8 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection 1.0%
  • CVE-2024-0799 Critical 9.8 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection 4.3%
  • CVE-2023-42000 Critical 9.8 Arcserve UDP Agent Unauthenticated Path Traversal File Upload 1.5%
  • CVE-2023-41999 Critical 9.8 Arcserve UDP Management Authentication Bypass 1.4%
  • CVE-2023-41998 Critical 9.8 Arcserve UDP Unauthenticated RCE 15.3%
  • CVE-2020-27858 High 7.5 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is not required to exploit this vulnerability. The specif 73.8%