Vulnerabilidades de Acronis
CVEs publicadas que afetam produtos de Acronis: 41 registro(s), com severidade, exploração e correções.
Cyber Protect 24Acronis Cyber Protect 17 21Acronis Cyber Protect Cloud Agent 9Acronis DeviceLock DLP 7Agent 6True Image 5Acronis Cyber Protect 16 4Acronis Cyber Protect 15 4Acronis Backup plugin for cPanel & WHM 1Acronis Backup extension for Plesk 1Acronis Backup plugin for DirectAdmin 1Cyber Infrastructure 1Acronis Backup 1Acronis True Image OEM 1Acronis Cloud Manager 1
CVE-2026-87886
Alta · 7.8
KEV CWE-276 17/09/2026
Acronis Backup Incorrect Default Permissions Vulnerability
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.
CVE-2026-50033
Alta · 7.3
CWE-427 03/06/2026
Uncontrolled Search Path Element em Acronis Acronis DeviceLock DLP
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-44682
Alta · 7.3
CWE-427 03/06/2026
Uncontrolled Search Path Element em Acronis Acronis DeviceLock DLP
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-44609
Alta · 7.3
CWE-427 03/06/2026
Uncontrolled Search Path Element em Acronis Acronis DeviceLock DLP
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-42061
Alta · 7.3
CWE-250 03/06/2026
Execution with Unnecessary Privileges em Acronis Acronis DeviceLock DLP
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-41952
Alta · 7.8
CWE-123 29/04/2026
Local privilege escalation due to improper input validation. The following products are…
Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
CVE-2026-41220
Alta · 7.8
CWE-787 29/04/2026
Out-of-bounds Write em Acronis Acronis DeviceLock DLP
Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
CVE-2026-25852
Média · 6.7
CWE-427 29/04/2026
Uncontrolled Search Path Element em Acronis Acronis DeviceLock DLP
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.
CVE-2026-33092
Alta · 7.8
CWE-15 10/04/2026
Local privilege escalation due to improper handling of environment variables. The…
Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.
CVE-2026-33271
Média · 6.7
CWE-732 02/04/2026
Incorrect Permission Assignment for Critical Resource em Acronis True Image
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.
CVE-2026-28728
Média · 6.7
CWE-427 02/04/2026
Uncontrolled Search Path Element em Acronis True Image
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
CVE-2026-27774
Média · 6.7
CWE-427 02/04/2026
Uncontrolled Search Path Element em Acronis True Image
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
CVE-2026-28727
Alta · 7.8
CWE-276 05/03/2026
Incorrect Default Permissions em Acronis Agent
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
CVE-2026-28726
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28725
Média · 5.5
CWE-732 05/03/2026
Incorrect Permission Assignment for Critical Resource em Acronis Cyber Protect
Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28724
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28723
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28722
Alta · 7.3
CWE-610 05/03/2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28721
Alta · 7.3
CWE-610 05/03/2026
Local privilege escalation due to improper soft link handling. The following products…
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28720
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28719
Média · 4.3
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28718
Alta · 7.5
CWE-779 05/03/2026
Denial of service due to insufficient input validation in authentication logging. The…
Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28717
Média · 5.0
CWE-276 05/03/2026
Incorrect Default Permissions em Acronis Cyber Protect
Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28716
Média · 4.4
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28715
Média · 6.5
CWE-863 05/03/2026
Incorrect Authorization em Acronis Cyber Protect
Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.