CVE-2025-30411

Published: Feb 20, 2026Modified: Jun 17, 2026

10.0

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: security@acronis.com (Secondary)

Description

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.

Affected (11)

Products: Acronis: Cyber Protect

Acronis

1 product

Cyber Protect

Configuration A

11 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3
Acronis Cyber Protect	Version 15 update4
Acronis Cyber Protect	Version 15 update5
Acronis Cyber Protect	Version 15 update6
Acronis Cyber Protect	Version 16
Acronis Cyber Protect	Version 16 update1
Acronis Cyber Protect	Version 16 update2
Acronis Cyber Protect	Version 16 update3

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-1390

Weak Authentication

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

References (1)

https://security-advisory.acronis.com/advisories/SEC-8768

Source: security@acronis.com

Vendor Advisory

Timeline

No history available yet.