Acronis

Records232All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high113CVSS 7.0–8.9

Exploited now

Acronis records in CISA KEV

TI-2026-59964 Acronis Backup Incorrect Default Permissions Vulnerability CRITICAL 93KEV 2026-09-16 TI-2023-24253 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 100KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records

Cyber Protect 86 records HIGH Agent 45 records LOW True Image 25 records LOW Cyber Protect Home Office 22 records MEDIUM Snap Deploy 9 records LOW Cyber Files 5 records LOW Cloud Manager 4 records MEDIUM Cyber Backup 4 records HIGH

Records

45 records in Agent · all components

TI-2022-22414 CVE-2022-45451 · GHSA-69gc-792g-gcp5

Improper privilege management in Acronis Cyber Protect Home Office

LOW 37

Local privilege escalation due to insecure driver communication port permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00512 Published 2023-08-31 Fixed in 40173, 30600 +1 CWE-269

TI-2023-22158 CVE-2023-41743 · GHSA-xv9r-2ff8-gxxc

Improper privilege management in Acronis Cyber Protect Home Office

LOW 36

Local privilege escalation due to insecure driver communication port permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00372 Published 2023-08-31 Fixed in 40278, 31637 +2 CWE-269

TI-2026-22938 CVE-2026-28727 · GHSA-2qwf-43v4-fqqq

Incorrect default permissions in Acronis Cyber Protect 17

LOW 35

Local privilege escalation due to insecure Unix socket permissions.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00111 Published 2026-03-05 Fixed in 41186, 41124 +1 CWE-276

TI-2023-22159 CVE-2023-41744 · GHSA-7xhq-g53m-h2mx

Improper signature verification in Acronis Agent

LOW 35

Local privilege escalation due to unrestricted loading of unsigned libraries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00137 Published 2023-08-31 Fixed in 30600, 35979 CWE-347

TI-2022-22415 CVE-2022-45452 · GHSA-rqpg-32gg-fvxh

Improper privilege management in Acronis Agent

LOW 35

Local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-05-18 Fixed in 30430, 30984 CWE-269

TI-2022-13037 CVE-2022-30990 · GHSA-7474-55gw-vfvq

Information disclosure in Acronis Cyber Protect 15

LOW 35

Sensitive information disclosure due to insecure folder permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2022-05-18 Fixed in 29240, 28037 CWE-200

TI-2021-13796 CVE-2021-34800 · GHSA-vvvp-px4m-56p7

Sensitive information in log files in Acronis Agent

LOW 35

Sensitive information could be logged.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2021-11-29 Fixed in 27147 CWE-532

TI-2020-11791 CVE-2020-14999 · GHSA-pvm4-qq6f-fmrw

A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before…

LOW 35

A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Windows memory protection and access sensitive data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01124 Published 2021-07-27 No fix listed

TI-2023-24252 CVE-2023-45248 · GHSA-v289-wfcx-99v3

Uncontrolled search path in Acronis Cyber Protect Cloud Agent

LOW 34

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0028 Published 2023-10-09 Fixed in 36497, 37391 CWE-427

TI-2023-23741 CVE-2023-44209 · GHSA-3q5r-87hx-pv77

Local privilege escalation due to improper soft link handling.

LOW 34

Local privilege escalation due to improper soft link handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00356 Published 2023-10-04 Fixed in 29051, 41186 CWE-610

TI-2026-22924 CVE-2026-28713 · GHSA-p4ch-hvfq-qqq4

Default credentials set for local privileged user in Virtual Appliance.

LOW 33

Default credentials set for local privileged user in Virtual Appliance.

CVSS 3.0HIGH 7.1 Network No auth User interaction EPSS 0.00202 Published 2026-03-05 Fixed in 36943, 41186 CWE-1392

TI-2025-10812 CVE-2025-11792 · GHSA-x2j4-rcg2-cv5w

Uncontrolled search path in Acronis Cyber Protect Cloud Agent

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00126 Published 2026-03-05 Fixed in 41124 CWE-427

TI-2023-24251 CVE-2023-45247 · GHSA-ppjq-h37f-8fwc

Missing authorization in Acronis Cyber Protect Cloud Agent

LOW 33

Sensitive information disclosure and manipulation due to missing authorization.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00238 Published 2023-10-09 Fixed in 36497, 39169 CWE-862

TI-2023-24250 CVE-2023-45246 · GHSA-466r-fx46-xrp4

Missing authorization in Acronis Cyber Protect Cloud Agent

LOW 33

Sensitive information disclosure and manipulation due to missing authorization.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00238 Published 2023-10-06 Fixed in 36343, 39169 CWE-862

TI-2023-23744 CVE-2023-44212 · GHSA-8q6q-fj7c-m7wr

Missing authorization in Acronis Agent

LOW 33

Sensitive information disclosure and manipulation due to missing authorization.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0036 Published 2023-10-05 Fixed in 31477 CWE-862

TI-2023-22164 CVE-2023-41749 · GHSA-qx7x-f75x-mw87

Information disclosure in Acronis Agent

LOW 33

Sensitive information disclosure due to excessive collection of system information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2023-08-31 Fixed in 32047, 35979 CWE-200

TI-2023-22157 CVE-2023-41742 · GHSA-92g9-c25j-hqp6

Exposure of resource to wrong sphere in Acronis Agent

LOW 33

Excessive attack surface due to binding to an unrestricted IP address.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00499 Published 2023-08-31 Fixed in 30430, 35979 CWE-1327

TI-2022-22422 CVE-2022-45459 · GHSA-67cf-9f3j-g3rg

Information disclosure in Acronis Agent

LOW 33

Sensitive information disclosure due to insecure registry permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00308 Published 2023-05-18 Fixed in 30025, 30984 CWE-200

TI-2022-22421 CVE-2022-45458 · GHSA-wm76-34r7-2v4m

Improper certificate validation in Acronis Agent

LOW 33

Sensitive information disclosure and manipulation due to improper certification validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0035 Published 2023-05-18 Fixed in 29633, 30984 CWE-295

TI-2022-22420 CVE-2022-45457 · GHSA-44hq-x6ch-xpg3

Improper certificate validation in Acronis Agent

LOW 33

Sensitive information disclosure and manipulation due to improper certification validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0035 Published 2023-05-18 Fixed in 29633, 30984 CWE-295

TI-2022-22419 CVE-2022-45456 · GHSA-cxxh-7h4c-gvgj

Improper authentication in Acronis Agent

LOW 33

Denial of service due to unauthenticated API endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2023-04-26 Fixed in 30161 CWE-287

TI-2022-22418 CVE-2022-45455 · GHSA-4pgg-95h7-rqc6

Local privilege escalation due to incomplete uninstallation cleanup.

LOW 33

Local privilege escalation due to incomplete uninstallation cleanup.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00149 Published 2023-02-13 Fixed in 40107, 30025 +1 CWE-459

TI-2022-22413 CVE-2022-45450 · GHSA-9c9q-cmcw-fx7g

Improper authorization in Acronis Agent

LOW 33

Sensitive information disclosure and manipulation due to improper authorization.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00404 Published 2023-05-18 Fixed in 28610, 30984 CWE-285

TI-2022-08058 CVE-2022-24113 · GHSA-5h99-pwr2-w237

Incorrect default permissions in Acronis Cyber Protect 15

LOW 33

Local privilege escalation due to excessive permissions assigned to child processes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00209 Published 2022-02-04 Fixed in 28035, 27147 +2 CWE-250

TI-2021-19898 CVE-2021-44204 · GHSA-v5vh-gq27-ch94

Improper authorization in Acronis Cyber Protect 15

LOW 33

Local privilege escalation via named pipe due to improper access control checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2022-02-04 Fixed in 28035, 27147 +2 CWE-285

Open these records in search →