Skip to contentAcronis vulnerabilities
Newest
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...CVE-2025-3041210.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...CVE-2025-3041110.0 Critical
- acronis cloud managerLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2026-07056.7 Medium
- acronis true image, true image for sandisk, true image for western digital +1 more +3 moreLocal privilege escalation due to insecure XPC service configuration. The following products are...CVE-2025-77798.8 High
- acronis true image, true image for sandisk, true image for western digital +1 more +3 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2025-111787.3 High
- acronis cyber protect cloud agentLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2025-95787.8 High
- acronis cyber protect cloud agentLocal privilege escalation due to improper soft link handling. The following products are...CVE-2025-489637.3 High
- acronis cyber protect 16Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber...CVE-2025-489624.3 Medium
- acronis cyber protect 16Local privilege escalation due to insecure folder permissions. The following products are...CVE-2025-489617.3 High
- acronis cyber protect 16Weak server key used for TLS encryption. The following products are affected: Acronis Cyber...CVE-2025-489605.9 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to insecure file permissions. The following products are affected:...CVE-2025-489596.7 Medium
- acronis cyber protect 17, cyber protect cloud agent +1 moreDenial of service due to improper handling of malformed input. The following products are...CVE-2025-304157.5 High
- acronis cyber protect 17, cyber protect cloud agent +1 moreDenial of service due to allocation of resources without limits. The following products are...CVE-2025-304095.5 Medium
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2025-304086.7 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to a binary hijacking vulnerability. The following products are...CVE-2025-304076.3 Medium
- acronis backup extension for plesk, backup plugin for cpanel & whm +1 moreArbitrary file overwrite during home directory recovery due to improper symbolic link handling....CVE-2025-248324.4 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2025-248286.3 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2025-248276.3 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2025-248296.3 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2025-248306.3 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to unquoted search path vulnerability. The following products are...CVE-2025-248316.6 Medium
- acronis snap deployLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2025-248266.7 Medium
- acronis cyber protect 16, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage....CVE-2024-555413.1 Low
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to excessive permissions assigned to Tray Monitor service. The...CVE-2024-555424.4 Medium
- acronis cyber protect 16Web installer integrity check used weak hash algorithm. The following products are affected:...CVE-2024-564145.5 Medium
- acronis cyber protect 16Missing session invalidation after user deletion. The following products are affected: Acronis...CVE-2024-564136.1 Medium
- acronis cyber protect 16, cyber protect +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-555406.6 Medium
- acronis cyber protect 16, cyber protect +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-555437.3 High
- acronis true image, true image oem +1 moreSensitive information disclosure due to insecure folder permissions. The following products are...CVE-2024-493855.5 Medium
- acronis true image, true image oem +1 moreSensitive information disclosure due to missing authentication. The following products are...CVE-2024-555384.0 Medium
- acronis cyber protect 16, cyber protect cloud agent +1 moreWeak algorithm used to sign RPM package. The following products are affected: Acronis Cyber...CVE-2024-555392.5 Low
- acronis backup plugin for cpanel & whmSensitive information disclosure during file browsing due to improper soft link handling. The...CVE-2024-340153.3 Low
- acronis backup extension for plesk, backup plugin for cpanel & whm, backup plugin for directadmin +2 moreArbitrary file overwrite during recovery due to improper soft link handling. The following...CVE-2024-340145.5 Medium
- acronis cyber filesSensitive information disclosure due to spell-jacking. The following products are affected:...CVE-2024-493865.7 Medium
- acronis cyber filesLocal privilege escalation due to insecure folder permissions. The following products are...CVE-2024-493897.8 High
- acronis cyber filesLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-493907.3 High
- acronis cyber filesLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-493916.7 Medium
- acronis cyber filesStored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following...CVE-2024-493925.7 Medium
- acronis cyber protect 16, cyber protect +1 moreSensitive information manipulation due to improper authorization. The following products are...CVE-2024-493883.1 Low
- acronis cyber protect 16, cyber protect +1 moreCleartext transmission of sensitive information in acep-collector service. The following products...CVE-2024-493875.4 Medium
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in acep-collector service due to binding to an unrestricted IP address....CVE-2024-493843.5 Low
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in acep-importer service due to binding to an unrestricted IP address....CVE-2024-493833.5 Low
- acronis cyber protect 16, cyber protect +1 moreExcessive attack surface in archive-server service due to binding to an unrestricted IP address....CVE-2024-493823.5 Low
- acronis cyber protect cloud agentLocal active protection service settings manipulation due to unnecessary privileges assignment....CVE-2024-89034.7 Medium
- acronis backup extension for plesk, backup plugin for cpanel & whm, backup plugin for directadmin +1 more +3 moreSensitive data disclosure and manipulation due to unnecessary privileges assignment. The...CVE-2024-87679.9 Critical
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-87666.7 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-340166.5 Medium
- acronis snap deploySensitive information disclosure due to insecure folder permissions. The following products are...CVE-2024-340185.5 Medium
- acronis snap deployLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-340176.7 Medium
- acronis snap deployLocal privilege escalation due to DLL hijacking vulnerability. The following products are...CVE-2024-340196.7 Medium
- Show moreLoading…