Read the docs

Acronis

Records232All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high113CVSS 7.0–8.9

Exploited now

Acronis records in CISA KEV
TI-2026-59964 Acronis Backup Incorrect Default Permissions Vulnerability Priority CRITICAL 93KEV 2026-09-16TI-2023-24253 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Priority CRITICAL 100KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records
Cyber Protect 86 records HIGH Agent 45 records LOW True Image 25 records LOW Cyber Protect Home Office 22 records MEDIUM Snap Deploy 9 records LOW Cyber Files 5 records LOW Cloud Manager 4 records MEDIUM Cyber Backup 4 records HIGH

Records

4 records in Cyber Backup · all components

TI-2022-03146 CVE-2022-3405 · GHSA-wrh2-hv24-w22w

Improper privilege management in Acronis Cyber Protect 15

Priority HIGH 73

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05325 Published 2023-05-03 Fixed in 29486, 16545 CWE-269
TI-2020-08193 CVE-2020-10138 · GHSA-8h9x-6778-m2fg

Improper access control in Acronis Cyber Backup

Priority LOW 35

Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00534 Published 2020-10-21 Fixed in 16363, 24600 CWE-284
Open these records in search →