Acronis Cyber Protect vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Acronis Cyber Protect: 24 record(s), with affected versions and fixes.cpe:2.3:a:acronis:cyber_protect
CVE-2026-28727
High · 7.8
CWE-276 Mar 5, 2026
Incorrect Default Permissions in Acronis Agent
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
CVE-2026-28726
Medium · 4.3
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28725
Medium · 5.5
CWE-732 Mar 5, 2026
Incorrect Permission Assignment for Critical Resource in Acronis Cyber Protect
Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28724
Medium · 4.3
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28723
Medium · 4.3
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28722
High · 7.3
CWE-610 Mar 5, 2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28721
High · 7.3
CWE-610 Mar 5, 2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28720
Medium · 4.3
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28719
Medium · 4.3
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28718
High · 7.5
CWE-779 Mar 5, 2026
Denial of service due to insufficient input validation in authentication logging. The…
Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28717
Medium · 5.0
CWE-276 Mar 5, 2026
Incorrect Default Permissions in Acronis Cyber Protect
Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28716
Medium · 4.4
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28715
Medium · 6.5
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28714
Medium · 4.8
CWE-522 Mar 5, 2026
Insufficiently Protected Credentials in Acronis Cyber Protect
Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28713
High · 7.1
CWE-1392 Mar 5, 2026
Default credentials set for local privileged user in Virtual Appliance. The following…
Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.
CVE-2026-28712
Medium · 6.3
CWE-427 Mar 5, 2026
Uncontrolled Search Path Element in Acronis Cyber Protect
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28711
Medium · 6.3
CWE-427 Mar 5, 2026
Uncontrolled Search Path Element in Acronis Cyber Protect
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28710
Critical · 9.8
CWE-1390 Mar 5, 2026
Sensitive information disclosure and manipulation due to improper authentication. The…
Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28709
Medium · 4.3
CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2025-30413
Medium · 4.4
CWE-732 Mar 5, 2026
Incorrect Permission Assignment for Critical Resource in Acronis Agent
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
CVE-2025-11791
High · 7.1
CWE-862 Mar 5, 2026
Missing Authorization in Acronis Agent
Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.
CVE-2025-30416
Critical · 10.0
CWE-862 Feb 19, 2026
Missing Authorization in Acronis Cyber Protect
Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
CVE-2025-30412
Critical · 10.0
CWE-1390 Feb 19, 2026
Sensitive data disclosure and manipulation due to improper authentication. The following…
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
CVE-2025-30411
Critical · 10.0
CWE-1390 Feb 19, 2026
Sensitive data disclosure and manipulation due to improper authentication. The following…
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.