CVE-2025-30416

Published: Feb 20, 2026Modified: Jun 17, 2026

10.0

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: security@acronis.com (Secondary)

Description

Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.

Affected (11)

Products: Acronis: Cyber Protect

Acronis

1 product

Cyber Protect

Configuration A

11 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3
Acronis Cyber Protect	Version 15 update4
Acronis Cyber Protect	Version 15 update5
Acronis Cyber Protect	Version 15 update6
Acronis Cyber Protect	Version 16
Acronis Cyber Protect	Version 16 update1
Acronis Cyber Protect	Version 16 update2
Acronis Cyber Protect	Version 16 update3

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (1)

https://security-advisory.acronis.com/advisories/SEC-8766

Source: security@acronis.com

Vendor Advisory

Timeline

No history available yet.