Read the docs

Acronis

Records232All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high113CVSS 7.0–8.9

Exploited now

Acronis records in CISA KEV
TI-2026-59964 Acronis Backup Incorrect Default Permissions Vulnerability Priority CRITICAL 93KEV 2026-09-16TI-2023-24253 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Priority CRITICAL 100KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records
Cyber Protect 86 records HIGH Agent 45 records LOW True Image 25 records LOW Cyber Protect Home Office 22 records MEDIUM Snap Deploy 9 records LOW Cyber Files 5 records LOW Cloud Manager 4 records MEDIUM Cyber Backup 4 records HIGH

Records

5 records in Cyber Files · all components

TI-2024-32976 CVE-2024-49391 · GHSA-qmp9-38cm-qhwr

Uncontrolled search path in Acronis Cyber Files

Priority LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00139 Published 2024-10-17 Fixed in 9.0.0x24 CWE-427
TI-2024-32975 CVE-2024-49390 · GHSA-88q9-p7rf-93g4

Uncontrolled search path in Acronis Cyber Files

Priority LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00164 Published 2024-10-17 Fixed in 9.0.0x24 CWE-427
TI-2024-32977 CVE-2024-49392 · GHSA-48cm-7wff-qj95

Cross-site scripting in Acronis Cyber Files

Priority LOW 24

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0023 Published 2024-10-17 Fixed in 9.0.0x24 CWE-79
Open these records in search →