Acronis

Records232All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high113CVSS 7.0–8.9

Exploited now

Acronis records in CISA KEV

TI-2026-59964 Acronis Backup Incorrect Default Permissions Vulnerability CRITICAL 93KEV 2026-09-16 TI-2023-24253 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 100KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records

Cyber Protect 86 records HIGH Agent 45 records LOW True Image 25 records LOW Cyber Protect Home Office 22 records MEDIUM Snap Deploy 9 records LOW Cyber Files 5 records LOW Cloud Manager 4 records MEDIUM Cyber Backup 4 records HIGH

Records

86 records in Cyber Protect · all components

TI-2022-03146 CVE-2022-3405 · GHSA-wrh2-hv24-w22w

Improper privilege management in Acronis Cyber Protect 15

HIGH 73

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.05325 Published 2023-05-03 Fixed in 29486, 16545 CWE-269

TI-2025-21714 CVE-2025-30412 · GHSA-xj5x-4c9j-jr89

Weak authentication in Acronis Cyber Protect 16

MEDIUM 50

Sensitive data disclosure and manipulation due to improper authentication.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00688 Published 2026-02-20 Fixed in 39938, 41800 CWE-1390

TI-2025-21713 CVE-2025-30411 · GHSA-5pfr-259p-873j

Weak authentication in Acronis Cyber Protect 16

MEDIUM 50

Sensitive data disclosure and manipulation due to improper authentication.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00771 Published 2026-02-20 Fixed in 39938, 41800 CWE-1390

TI-2025-21717 CVE-2025-30416 · GHSA-p3p8-xvrh-mwgr

Missing authorization in Acronis Cyber Protect 16

MEDIUM 49

Sensitive data disclosure and manipulation due to missing authorization.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00451 Published 2026-02-20 Fixed in 39938, 41800 CWE-862

TI-2023-23738 CVE-2023-44206 · GHSA-vj6p-v8m8-9cjq

Authorization bypass in Acronis Cyber Protect 15

MEDIUM 49

Sensitive information disclosure and manipulation due to improper authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01027 Published 2023-09-27 Fixed in 35979 CWE-639

TI-2026-22921 CVE-2026-28710 · GHSA-pxv9-5jrr-rmrx

Weak authentication in Acronis Cyber Protect 17

MEDIUM 43

Sensitive information disclosure and manipulation due to improper authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00471 Published 2026-03-05 Fixed in 41186 CWE-1390

TI-2023-23692 CVE-2023-44152 · GHSA-pjp5-qqc6-2qcq

Missing authentication in Acronis Cyber Protect 15

MEDIUM 41

Sensitive information disclosure and manipulation due to improper authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00904 Published 2023-09-27 Fixed in 35979 CWE-306

TI-2022-13042 CVE-2022-30995 · GHSA-wcwf-6v8x-jfhm

Improper authentication in Acronis Cyber Protect 15

MEDIUM 41

Sensitive information disclosure due to improper authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03265 Published 2023-05-03 Fixed in 29486, 16545 CWE-287

TI-2026-22929 CVE-2026-28718 · GHSA-7fqq-633v-44rr

Denial of service due to insufficient input validation in authentication logging.

LOW 39

Denial of service due to insufficient input validation in authentication logging.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-03-05 Fixed in 41186 CWE-779

TI-2024-32973 CVE-2024-49388 · GHSA-7729-x926-xq76

Authorization bypass in Acronis Cyber Protect 16

LOW 39

Sensitive information manipulation due to improper authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00266 Published 2024-10-15 Fixed in 38690 CWE-639

TI-2023-23694 CVE-2023-44154 · GHSA-ghrw-x6cv-mr95

Authorization bypass in Acronis Cyber Protect 15

LOW 37

Sensitive information disclosure and manipulation due to improper authorization.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00755 Published 2023-09-27 Fixed in 35979 CWE-639

TI-2022-22414 CVE-2022-45451 · GHSA-69gc-792g-gcp5

Improper privilege management in Acronis Cyber Protect Home Office

LOW 37

Local privilege escalation due to insecure driver communication port permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00512 Published 2023-08-31 Fixed in 40173, 30600 +1 CWE-269

TI-2023-22158 CVE-2023-41743 · GHSA-xv9r-2ff8-gxxc

Improper privilege management in Acronis Cyber Protect Home Office

LOW 36

Local privilege escalation due to insecure driver communication port permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00372 Published 2023-08-31 Fixed in 40278, 31637 +2 CWE-269

TI-2026-22938 CVE-2026-28727 · GHSA-2qwf-43v4-fqqq

Incorrect default permissions in Acronis Cyber Protect 17

LOW 35

Local privilege escalation due to insecure Unix socket permissions.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00111 Published 2026-03-05 Fixed in 41186, 41124 +1 CWE-276

TI-2024-36870 CVE-2024-55543 · GHSA-274c-jx98-whwv

Uncontrolled search path in Acronis Cyber Protect 16

LOW 35

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00165 Published 2025-01-02 Fixed in 39169 CWE-427

TI-2024-36867 CVE-2024-55540 · GHSA-c85g-7vc6-q29w

Uncontrolled search path in Acronis Cyber Protect 16

LOW 35

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00164 Published 2025-01-02 Fixed in 39169 CWE-427

TI-2023-23696 CVE-2023-44156 · GHSA-453j-gwgw-838r

Sensitive information disclosure due to spell-jacking.

LOW 35

Sensitive information disclosure due to spell-jacking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01043 Published 2023-09-27 Fixed in 35979 CWE-359

TI-2023-23695 CVE-2023-44155 · GHSA-8f74-pq25-4xr2

Sensitive information leak through log files in Acronis Cyber Protect 15

LOW 35

Sensitive information leak through log files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01101 Published 2023-09-27 Fixed in 35979 CWE-532

TI-2023-22159 CVE-2023-41744 · GHSA-7xhq-g53m-h2mx

Improper signature verification in Acronis Agent

LOW 35

Local privilege escalation due to unrestricted loading of unsigned libraries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00137 Published 2023-08-31 Fixed in 30600, 35979 CWE-347

TI-2022-22415 CVE-2022-45452 · GHSA-rqpg-32gg-fvxh

Improper privilege management in Acronis Agent

LOW 35

Local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2023-05-18 Fixed in 30430, 30984 CWE-269

TI-2022-13037 CVE-2022-30990 · GHSA-7474-55gw-vfvq

Information disclosure in Acronis Cyber Protect 15

LOW 35

Sensitive information disclosure due to insecure folder permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0092 Published 2022-05-18 Fixed in 29240, 28037 CWE-200

TI-2020-18064 CVE-2020-35556 · GHSA-w8ww-rjx9-2r6h

An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172.

LOW 35

An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01062 Published 2021-02-22 No fix listed

TI-2020-08193 CVE-2020-10138 · GHSA-8h9x-6778-m2fg

Improper access control in Acronis Cyber Backup

LOW 35

Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00534 Published 2020-10-21 Fixed in 16363, 24600 CWE-284

TI-2023-23699 CVE-2023-44159 · GHSA-rrx9-x9wf-g3vh

Cleartext storage of sensitive information in Acronis Cyber Protect 15

LOW 34

Sensitive information disclosure due to cleartext storage of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00674 Published 2023-09-27 Fixed in 35979 CWE-312

TI-2023-23698 CVE-2023-44158 · GHSA-x7j8-2fx2-vhwq

Insufficiently protected credentials in Acronis Cyber Protect 15

LOW 34

Sensitive information disclosure due to insufficient token field masking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0079 Published 2023-09-27 Fixed in 35979 CWE-522

Open these records in search →