CVE Intelligence

Acronis vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Acronis products: 41 record(s), with severity, exploitation and fixes.

Cyber Protect 24Acronis Cyber Protect 17 21Acronis Cyber Protect Cloud Agent 9Acronis DeviceLock DLP 7Agent 6True Image 5Acronis Cyber Protect 16 4Acronis Cyber Protect 15 4Acronis Backup plugin for cPanel & WHM 1Acronis Backup extension for Plesk 1Acronis Backup plugin for DirectAdmin 1Cyber Infrastructure 1Acronis Backup 1Acronis True Image OEM 1Acronis Cloud Manager 1

Exploited only (KEV) →

CVE-2026-87886 High · 7.8 KEV CWE-276 Sep 17, 2026
Acronis Backup Incorrect Default Permissions Vulnerability
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.
CVE-2026-50033 High · 7.3 CWE-427 Jun 3, 2026
Uncontrolled Search Path Element in Acronis Acronis DeviceLock DLP
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-44682 High · 7.3 CWE-427 Jun 3, 2026
Uncontrolled Search Path Element in Acronis Acronis DeviceLock DLP
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-44609 High · 7.3 CWE-427 Jun 3, 2026
Uncontrolled Search Path Element in Acronis Acronis DeviceLock DLP
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-42061 High · 7.3 CWE-250 Jun 3, 2026
Execution with Unnecessary Privileges in Acronis Acronis DeviceLock DLP
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-41952 High · 7.8 CWE-123 Apr 29, 2026
Local privilege escalation due to improper input validation. The following products are…
Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
CVE-2026-41220 High · 7.8 CWE-787 Apr 29, 2026
Out-of-bounds Write in Acronis Acronis DeviceLock DLP
Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
CVE-2026-25852 Medium · 6.7 CWE-427 Apr 29, 2026
Uncontrolled Search Path Element in Acronis Acronis DeviceLock DLP
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.
CVE-2026-33092 High · 7.8 CWE-15 Apr 10, 2026
Local privilege escalation due to improper handling of environment variables. The…
Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.
CVE-2026-33271 Medium · 6.7 CWE-732 Apr 2, 2026
Incorrect Permission Assignment for Critical Resource in Acronis True Image
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.
CVE-2026-28728 Medium · 6.7 CWE-427 Apr 2, 2026
Uncontrolled Search Path Element in Acronis True Image
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
CVE-2026-27774 Medium · 6.7 CWE-427 Apr 2, 2026
Uncontrolled Search Path Element in Acronis True Image
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
CVE-2026-28727 High · 7.8 CWE-276 Mar 5, 2026
Incorrect Default Permissions in Acronis Agent
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
CVE-2026-28726 Medium · 4.3 CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28725 Medium · 5.5 CWE-732 Mar 5, 2026
Incorrect Permission Assignment for Critical Resource in Acronis Cyber Protect
Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28724 Medium · 4.3 CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28723 Medium · 4.3 CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28722 High · 7.3 CWE-610 Mar 5, 2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28721 High · 7.3 CWE-610 Mar 5, 2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28720 Medium · 4.3 CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28719 Medium · 4.3 CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28718 High · 7.5 CWE-779 Mar 5, 2026
Denial of service due to insufficient input validation in authentication logging. The…
Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28717 Medium · 5.0 CWE-276 Mar 5, 2026
Incorrect Default Permissions in Acronis Cyber Protect
Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28716 Medium · 4.4 CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28715 Medium · 6.5 CWE-863 Mar 5, 2026
Incorrect Authorization in Acronis Cyber Protect
Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.