Read the docs
TI-2025-21714 Aliases CVE-2025-30412GHSA-xj5x-4c9j-jr89

Weak authentication in Acronis Cyber Protect 16

Priority MEDIUM 50CWE-1390Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA.

Summary

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00688 52nd percentileScored 2026-11-07
Fix Fixed Acronis Cyber Protect 16 (Acronis): 39938Acronis Cyber Protect 15 (Acronis): 41800

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AcronisAcronis Cyber Protect 16before 3993839938Patch availableCNA
AcronisAcronis Cyber Protect 15before 4180041800Patch availableCNA
  • Acronis Cyber Protect 16 VendorAcronis Affected before 39938 Fixed in 39938 Patch available CNA
  • Acronis Cyber Protect 15 VendorAcronis Affected before 41800 Fixed in 41800 Patch available CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*15VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*15 update1VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*15 update2VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*15 update3VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*15 update4VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:*15 update5VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:15:update6:*:*:*:*:*:*15 update6VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:16:-:*:*:*:*:*:*16VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:16:update1:*:*:*:*:*:*16 update1VulnerableAcronis
cpe:2.3:a:acronis:cyber_protect:16:update2:*:*:*:*:*:*16 update2VulnerableAcronis
  • cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:* Versions 15 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:* Versions 15 update1 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:* Versions 15 update2 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:* Versions 15 update3 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:* Versions 15 update4 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:* Versions 15 update5 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:15:update6:*:*:*:*:*:* Versions 15 update6 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:16:-:*:*:*:*:*:* Versions 16 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:16:update1:*:*:*:*:*:* Versions 16 update1 Vulnerable ·Acronis
  • cpe:2.3:a:acronis:cyber_protect:16:update2:*:*:*:*:*:* Versions 16 update2 Vulnerable ·Acronis
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:acronis:cyber_protect:16:update3:*:*:*:*:*:*16 update3VulnerableAcronis
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*all versionsRunning onLinux
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
  • cpe:2.3:a:acronis:cyber_protect:16:update3:*:*:*:*:*:* Versions 16 update3 Vulnerable ·Acronis
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions all versions Running on ·Linux
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft

Remediation

  • Fix · CNA Acronis Cyber Protect 16 (Acronis) Fixed in 39938
  • Fix · CNA Acronis Cyber Protect 15 (Acronis) Fixed in 41800

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Acronis Cyber Protect 15, Acronis Cyber Protect 16 39938, 41800

    4 records Highest priority Priority MEDIUM 4 MEDIUM

    Other records, highest priority first

    • TI-2025-21713 Weak authentication in Acronis Cyber Protect 16Priority MEDIUM 50
    • TI-2025-21712 Missing authentication in Acronis Cyber Protect Cloud AgentPriority MEDIUM 50
    • TI-2025-21717 Missing authorization in Acronis Cyber Protect 16Priority MEDIUM 49
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-30412
  2. 2026-10-03 Alias added: GHSA-xj5x-4c9j-jr89

References

Advisory 1

  • TI-2022-03146 Improper privilege management in Acronis Cyber Protect 15 CVSS 3.1HIGH 8.8
  • TI-2025-21713 Weak authentication in Acronis Cyber Protect 16 CVSS 3.0CRITICAL 10.0
  • TI-2025-21717 Missing authorization in Acronis Cyber Protect 16 CVSS 3.0CRITICAL 10.0
  • TI-2023-23738 Authorization bypass in Acronis Cyber Protect 15 CVSS 3.1CRITICAL 9.1
  • TI-2026-22921 Weak authentication in Acronis Cyber Protect 17 CVSS 3.1CRITICAL 9.8
  • TI-2023-23692 Missing authentication in Acronis Cyber Protect 15 CVSS 3.1CRITICAL 9.1
See all 85 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences