Skip to contentAcronis Cyber Protect 16 vulnerabilities
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to missing authorization. The following products...CVE-2025-3041610.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect cloud agent +2 moreSensitive data disclosure and manipulation due to missing authentication. The following products...CVE-2025-304109.8 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...CVE-2025-3041210.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...CVE-2025-3041110.0 Critical
- acronis cyber protect 16Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber...CVE-2025-489624.3 Medium
- acronis cyber protect 16Local privilege escalation due to insecure folder permissions. The following products are...CVE-2025-489617.3 High
- acronis cyber protect 16Weak server key used for TLS encryption. The following products are affected: Acronis Cyber...CVE-2025-489605.9 Medium
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2025-304086.7 Medium
- acronis cyber protect 16, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage....CVE-2024-555413.1 Low
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to excessive permissions assigned to Tray Monitor service. The...CVE-2024-555424.4 Medium
- acronis cyber protect 16Web installer integrity check used weak hash algorithm. The following products are affected:...CVE-2024-564145.5 Medium
- acronis cyber protect 16Missing session invalidation after user deletion. The following products are affected: Acronis...CVE-2024-564136.1 Medium
- acronis cyber protect 16, cyber protect +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-555406.6 Medium
- acronis cyber protect 16, cyber protect +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-555437.3 High
- acronis cyber protect 16, cyber protect cloud agent +1 moreWeak algorithm used to sign RPM package. The following products are affected: Acronis Cyber...CVE-2024-555392.5 Low
- acronis cyber protect 16, cyber protect +1 moreSensitive information manipulation due to improper authorization. The following products are...CVE-2024-493883.1 Low
- acronis cyber protect 16, cyber protect +1 moreCleartext transmission of sensitive information in acep-collector service. The following products...CVE-2024-493875.4 Medium
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in acep-collector service due to binding to an unrestricted IP address....CVE-2024-493843.5 Low
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in acep-importer service due to binding to an unrestricted IP address....CVE-2024-493833.5 Low
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in archive-server service due to binding to an unrestricted IP address....CVE-2024-493823.5 Low
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-87666.7 Medium
- acronis cyber protect 16, cyber protect cloud agent, true image +1 more +3 moreLocal privilege escalation due to unquoted search path vulnerability. The following products are...CVE-2024-340108.2 High
- acronis cyber protect 16, cyber protect cloud agent +1 moreSensitive information disclosure and manipulation due to missing authorization. The following...CVE-2023-486837.1 High
- acronis cyber protect 16, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability in unit name. The following products are affected...CVE-2023-486826.1 Medium
- acronis cyber protect 16, cyber protect +1 moreSelf cross-site scripting (XSS) vulnerability in storage nodes search field. The following...CVE-2023-486811.9 Low
- acronis cyber protect 16, cyber protect +1 moreSensitive information disclosure due to excessive collection of system information. The following...CVE-2023-486803.3 Low
- acronis cyber protect 16, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage....CVE-2023-486793.1 Low
- acronis cyber protect 16, cyber protect +1 moreSensitive information disclosure due to insecure folder permissions. The following products are...CVE-2023-486785.5 Medium
- acronis cyber protect 16, cyber protect cloud agent, cyber protect home office +1 more +3 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2023-486777.3 High
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to missing authorization. The following...CVE-2023-452477.1 High
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2023-452486.6 Medium
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to improper authentication. The following...CVE-2023-452467.1 High
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to missing authorization. The following...CVE-2023-452447.1 High
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information leak through log files. The following products are affected: Acronis Agent ...CVE-2023-452414.4 Medium
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure due to excessive collection of system information. The following...CVE-2023-442133.3 Low
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to missing authorization. The following...CVE-2023-442117.1 High