Acronis

Records232All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high113CVSS 7.0–8.9

Exploited now

Acronis records in CISA KEV

TI-2026-59964 Acronis Backup Incorrect Default Permissions Vulnerability CRITICAL 93KEV 2026-09-16 TI-2023-24253 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 100KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records

Cyber Protect 86 records HIGH Agent 45 records LOW True Image 25 records LOW Cyber Protect Home Office 22 records MEDIUM Snap Deploy 9 records LOW Cyber Files 5 records LOW Cloud Manager 4 records MEDIUM Cyber Backup 4 records HIGH

Records

232 records

TI-2023-24253 CVE-2023-45249 · GHSA-rjfq-p48j-h96h

Remote command execution due to use of default passwords.

CRITICAL 100KEV

Remote command execution due to use of default passwords.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.53535 Published 2024-07-24 Fixed in 5.0.1-61, 5.1.1-71 +3 CWE-1393

TI-2026-59964 CVE-2026-87886 · GHSA-hrq3-qgq7-jm9x

Incorrect default permissions in Acronis Backup plugin for cPanel & WHM

CRITICAL 93KEV

Local privilege escalation due to insecure file permissions.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00233 Published 2026-09-17 Fixed in 1.9.3.1021, 1.8.11.638 +1 CWE-276

TI-2022-03146 CVE-2022-3405 · GHSA-wrh2-hv24-w22w

Improper privilege management in Acronis Cyber Protect 15

HIGH 73

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05325 Published 2023-05-03 Fixed in 29486, 16545 CWE-269

TI-2025-21714 CVE-2025-30412 · GHSA-xj5x-4c9j-jr89

Weak authentication in Acronis Cyber Protect 16

MEDIUM 50

Sensitive data disclosure and manipulation due to improper authentication.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00688 Published 2026-02-20 Fixed in 39938, 41800 CWE-1390

TI-2025-21713 CVE-2025-30411 · GHSA-5pfr-259p-873j

Weak authentication in Acronis Cyber Protect 16

MEDIUM 50

Sensitive data disclosure and manipulation due to improper authentication.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00771 Published 2026-02-20 Fixed in 39938, 41800 CWE-1390

TI-2025-21712 CVE-2025-30410 · GHSA-vvcr-j24q-wc29

Missing authentication in Acronis Cyber Protect Cloud Agent

MEDIUM 50

Sensitive data disclosure and manipulation due to missing authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-02-20 Fixed in 39870, 39938 +1 CWE-306

TI-2025-21717 CVE-2025-30416 · GHSA-p3p8-xvrh-mwgr

Missing authorization in Acronis Cyber Protect 16

MEDIUM 49

Sensitive data disclosure and manipulation due to missing authorization.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00451 Published 2026-02-20 Fixed in 39938, 41800 CWE-862

TI-2023-23738 CVE-2023-44206 · GHSA-vj6p-v8m8-9cjq

Authorization bypass in Acronis Cyber Protect 15

MEDIUM 49

Sensitive information disclosure and manipulation due to improper authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01027 Published 2023-09-27 Fixed in 35979 CWE-639

TI-2026-78572 CVE-2026-87095 · GHSA-54qj-98fw-w229

Incorrect authorization in Acronis Cyber Infrastructure

MEDIUM 47

Sensitive information disclosure and manipulation due to improper authorization checks.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00242 Published 2026-10-21 Fixed in 6.0.1-112, 6.1.1-64 +1 CWE-863

TI-2023-22163 CVE-2023-41748 · GHSA-q2xw-8hhw-q9w7

Improper input validation in Acronis Cloud Manager

MEDIUM 45

Remote command execution due to improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01287 Published 2023-08-31 Fixed in 6.2.23089.203 CWE-20

TI-2023-22161 CVE-2023-41746 · GHSA-jcwx-6cr4-768g

Improper input validation in Acronis Cloud Manager

MEDIUM 45

Remote command execution due to improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01287 Published 2023-08-31 Fixed in 6.2.23089.203 CWE-20

TI-2026-22921 CVE-2026-28710 · GHSA-pxv9-5jrr-rmrx

Weak authentication in Acronis Cyber Protect 17

MEDIUM 43

Sensitive information disclosure and manipulation due to improper authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00471 Published 2026-03-05 Fixed in 41186 CWE-1390

TI-2024-08133 CVE-2024-8767 · GHSA-vmvq-4vv4-p8f9

Sensitive data disclosure and manipulation due to unnecessary privileges assignment.

MEDIUM 43

Sensitive data disclosure and manipulation due to unnecessary privileges assignment.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00476 Published 2024-09-17 Fixed in 619, 555 +1 CWE-250

TI-2023-23740 CVE-2023-44208 · GHSA-g5q7-xv5f-9xr9

Missing authorization in Acronis Cyber Protect Home Office

MEDIUM 41

Sensitive information disclosure and manipulation due to missing authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00367 Published 2023-10-04 Fixed in 40713, 42575 CWE-862

TI-2023-23692 CVE-2023-44152 · GHSA-pjp5-qqc6-2qcq

Missing authentication in Acronis Cyber Protect 15

MEDIUM 41

Sensitive information disclosure and manipulation due to improper authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00904 Published 2023-09-27 Fixed in 35979 CWE-306

TI-2022-13042 CVE-2022-30995 · GHSA-wcwf-6v8x-jfhm

Improper authentication in Acronis Cyber Protect 15

MEDIUM 41

Sensitive information disclosure due to improper authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03265 Published 2023-05-03 Fixed in 29486, 16545 CWE-287

TI-2026-22929 CVE-2026-28718 · GHSA-7fqq-633v-44rr

Denial of service due to insufficient input validation in authentication logging.

LOW 39

Denial of service due to insufficient input validation in authentication logging.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-03-05 Fixed in 41186 CWE-779

TI-2025-21716 CVE-2025-30415 · GHSA-5556-q3wj-f3qc

Denial of service due to improper handling of malformed input.

LOW 39

Denial of service due to improper handling of malformed input.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2025-06-04 Fixed in 40077, 41186 CWE-1286

TI-2025-07104 CVE-2025-7779 · GHSA-c4rx-m7vw-65hg

Improper privilege management in Acronis True Image

LOW 39

Local privilege escalation due to insecure XPC service configuration.

CVSS 3.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00126 Published 2025-09-30 Fixed in 42389, 42198 +2 CWE-269

TI-2024-32973 CVE-2024-49388 · GHSA-7729-x926-xq76

Authorization bypass in Acronis Cyber Protect 16

LOW 39

Sensitive information manipulation due to improper authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00266 Published 2024-10-15 Fixed in 38690 CWE-639

TI-2017-02423 CVE-2017-3219 · GHSA-67cv-mr76-54w6

Insufficient verification of data authenticity in Acronis True Image

LOW 39

Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00474 Published 2017-06-21 No fix listed CWE-311

TI-2020-15747 CVE-2020-25736 · GHSA-239r-qg7g-cjfp

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege…

LOW 38

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02152 Published 2021-07-15 No fix listed

TI-2025-31099 CVE-2025-48961 · GHSA-7c4m-fm4f-hjxx

Incorrect permission assignment in Acronis Cyber Protect 16

LOW 37

Local privilege escalation due to insecure folder permissions.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00143 Published 2025-06-04 Fixed in 39938 CWE-732

TI-2024-22482 CVE-2024-34013 · GHSA-rgcv-cq58-fv8p

OS command injection in Acronis True Image

LOW 37

Local privilege escalation due to OS command injection vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00635 Published 2024-07-18 Fixed in 41396, 42571 CWE-78

TI-2024-22479 CVE-2024-34010 · GHSA-8q88-x5q8-wj38

Local privilege escalation due to unquoted search path vulnerability.

LOW 37

Local privilege escalation due to unquoted search path vulnerability.

CVSS 3.0HIGH 8.2 Local High privileges No interaction EPSS 0.00201 Published 2024-04-29 Fixed in 37758, 38690 +2 CWE-428

Open these records in search →