← Back

Acronis

acronis

172 CVEs • 15 products

Products (15)

Click to collapse
Toggle
Cyber Protect
cyber_protect
86 CVEs
Agent
agent
45 CVEs
True Image
true_image
25 CVEs
Cyber Protect Home Office
cyber_protect_home_office
22 CVEs
Snap Deploy
snap_deploy
9 CVEs
Cyber Files
cyber_files
5 CVEs
Cyber Backup
cyber_backup
4 CVEs
Cloud Manager
cloud_manager
4 CVEs
True Image 2020
true_image_2020
3 CVEs
Cyber Infrastructure
cyber_infrastructure
3 CVEs
True Image Windows Agent
true_image_windows_agent
1 CVE
True Image Echo Server
true_image_echo_server
1 CVE
Cyber Protect Cloud
cyber_protect_cloud
1 CVE
Cyber Protection Agent
cyber_protection_agent
1 CVE
Vss Doctor
vss_doctor
1 CVE

CVEs (172)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-28710
1Acronis
1Cyber Protect
Jun 17, 2026
Mar 6, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2026-28709
1Acronis
1Cyber Protect
Jun 17, 2026
Mar 6, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
CVE-2025-30413
1Acronis
2Agent
Cyber Protect
Jun 17, 2026
Mar 6, 2026
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, ma...Show more
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.Show less
CVE-2025-11792
1Acronis
1Agent
Jun 17, 2026
Mar 6, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124.
CVE-2025-11791
1Acronis
2Agent
Cyber Protect
Jun 17, 2026
Mar 6, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect...Show more
Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.Show less
CVE-2025-11790
1Acronis
1Agent
Jun 17, 2026
Mar 6, 2026
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.
CVE-2025-30416
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 20, 2026
N/A· v4
10.0 CRITICAL· v3
N/A· v2
Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before...Show more
Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.Show less
CVE-2025-30412
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 20, 2026
N/A· v4
10.0 CRITICAL· v3
N/A· v2
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) befo...Show more
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.Show less
CVE-2025-30411
1Acronis
1Cyber Protect
Jun 17, 2026
Feb 20, 2026
N/A· v4
10.0 CRITICAL· v3
N/A· v2
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) befo...Show more
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.Show less
CVE-2024-55543
1Acronis
1Cyber Protect
Jun 17, 2026
Jan 2, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-55541
1Acronis
1Cyber Protect
Jun 17, 2026
Jan 2, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169.
CVE-2024-55540
1Acronis
1Cyber Protect
Jun 17, 2026
Jan 2, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
CVE-2024-49392
1Acronis
1Cyber Files
Jun 17, 2026
Oct 17, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.
CVE-2024-49391
1Acronis
1Cyber Files
Jun 17, 2026
Oct 17, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.
CVE-2024-49390
1Acronis
1Cyber Files
Jun 17, 2026
Oct 17, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.
CVE-2024-49389
1Acronis
1Cyber Files
Jun 17, 2026
Oct 17, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.
CVE-2024-49386
1Acronis
1Cyber Files
Jun 17, 2026
Oct 17, 2024
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.
CVE-2024-49388
1Acronis
1Cyber Protect
Jun 17, 2026
Oct 15, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVE-2024-49387
1Acronis
1Cyber Protect
Jun 17, 2026
Oct 15, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVE-2024-49384
1Acronis
1Cyber Protect
Jun 17, 2026
Oct 15, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.