Vulnerabilities

TI-2026-22937 CVE-2026-28726 · GHSA-m2gv-468v-rj9v

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Sensitive information disclosure due to improper access control.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00189 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22936 CVE-2026-28725 · GHSA-rvxj-27xq-j8mc

Incorrect permission assignment in Acronis Cyber Protect 17

LOW 24

Sensitive information disclosure due to improper configuration of a headless browser.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-03-05 Fixed in 41186 CWE-732

TI-2025-21715 CVE-2025-30413 · GHSA-cwh6-5f6j-h3f9

Incorrect permission assignment in Acronis Cyber Protect Cloud Agent

LOW 20

Credentials are not deleted from Acronis Agent after plan revocation.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00172 Published 2026-03-05 Fixed in 40497, 41186 CWE-732

TI-2026-22935 CVE-2026-28724 · GHSA-g9c5-vhp6-c68r

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized data access due to insufficient access control validation.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00189 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22934 CVE-2026-28723 · GHSA-2xpv-2vp6-3v7h

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized report deletion due to insufficient access control.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22933 CVE-2026-28722 · GHSA-cv6c-2998-rcj3

Local privilege escalation due to improper soft link handling.

LOW 33

Local privilege escalation due to improper soft link handling.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00164 Published 2026-03-05 Fixed in 41186 CWE-610

TI-2026-22932 CVE-2026-28721 · GHSA-3x6x-hp89-vcmq

Local privilege escalation due to improper soft link handling.

LOW 33

Local privilege escalation due to improper soft link handling.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00164 Published 2026-03-05 Fixed in 41186 CWE-610

TI-2026-22931 CVE-2026-28720 · GHSA-vmwm-8rvf-246x

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized modification of settings due to insufficient authorization checks.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22930 CVE-2026-28719 · GHSA-48v9-j4g9-9p23

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized resource manipulation due to improper authorization checks.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22929 CVE-2026-28718 · GHSA-7fqq-633v-44rr

Denial of service due to insufficient input validation in authentication logging.

LOW 39

Denial of service due to insufficient input validation in authentication logging.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-03-05 Fixed in 41186 CWE-779

TI-2026-22928 CVE-2026-28717 · GHSA-xc5m-w25p-gg57

Incorrect default permissions in Acronis Cyber Protect 17

LOW 24

Local privilege escalation due to improper directory permissions.

CVSS 3.0MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00131 Published 2026-03-05 Fixed in 41186 CWE-276

TI-2026-22927 CVE-2026-28716 · GHSA-jf55-8wcc-gvqh

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Information disclosure and manipulation due to improper authorization checks.

CVSS 3.0MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00107 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22926 CVE-2026-28715 · GHSA-ffgg-g824-6mxj

Incorrect authorization in Acronis Cyber Protect 17

LOW 29

Sensitive information disclosure due to improper authorization checks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00316 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22925 CVE-2026-28714 · GHSA-3q66-2qch-5x6m

Insufficiently protected credentials in Acronis Cyber Protect 17

LOW 21

Unnecessary transmission of sensitive cryptographic material.

CVSS 3.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00183 Published 2026-03-05 Fixed in 41186 CWE-522

TI-2026-22924 CVE-2026-28713 · GHSA-p4ch-hvfq-qqq4

Default credentials set for local privileged user in Virtual Appliance.

LOW 33

Default credentials set for local privileged user in Virtual Appliance.

CVSS 3.0HIGH 7.1 Network No auth User interaction EPSS 0.00202 Published 2026-03-05 Fixed in 36943, 41186 CWE-1392

TI-2026-22923 CVE-2026-28712 · GHSA-q9mw-gr87-7j3r

Uncontrolled search path in Acronis Cyber Protect 17

LOW 29

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00104 Published 2026-03-05 Fixed in 41186 CWE-427

TI-2026-22922 CVE-2026-28711 · GHSA-45c9-wrjh-8h56

Uncontrolled search path in Acronis Cyber Protect 17

LOW 29

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00104 Published 2026-03-05 Fixed in 41186 CWE-427

TI-2026-22921 CVE-2026-28710 · GHSA-pxv9-5jrr-rmrx

Weak authentication in Acronis Cyber Protect 17

MEDIUM 43

Sensitive information disclosure and manipulation due to improper authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00471 Published 2026-03-05 Fixed in 41186 CWE-1390

TI-2026-22920 CVE-2026-28709 · GHSA-226g-qx73-56w6

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized resource manipulation due to improper authorization checks.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2025-10811 CVE-2025-11791 · GHSA-7gg7-8qp9-3qr4

Missing authorization in Acronis Cyber Protect 17

LOW 30

Sensitive information disclosure and manipulation due to insufficient authorization checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2026-03-05 Fixed in 41186, 41124 CWE-862

TI-2026-22938 CVE-2026-28727 · GHSA-2qwf-43v4-fqqq

Incorrect default permissions in Acronis Cyber Protect 17

LOW 35

Local privilege escalation due to insecure Unix socket permissions.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00111 Published 2026-03-05 Fixed in 41186, 41124 +1 CWE-276

TI-2025-21717 CVE-2025-30416 · GHSA-p3p8-xvrh-mwgr

Missing authorization in Acronis Cyber Protect 16

MEDIUM 49

Sensitive data disclosure and manipulation due to missing authorization.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00451 Published 2026-02-20 Fixed in 39938, 41800 CWE-862

TI-2025-21714 CVE-2025-30412 · GHSA-xj5x-4c9j-jr89

Weak authentication in Acronis Cyber Protect 16

MEDIUM 50

Sensitive data disclosure and manipulation due to improper authentication.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00688 Published 2026-02-20 Fixed in 39938, 41800 CWE-1390

TI-2025-21713 CVE-2025-30411 · GHSA-5pfr-259p-873j

Weak authentication in Acronis Cyber Protect 16

MEDIUM 50

Sensitive data disclosure and manipulation due to improper authentication.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00771 Published 2026-02-20 Fixed in 39938, 41800 CWE-1390

TI-2024-36868 CVE-2024-55541 · GHSA-p4mj-rcrm-4875

Cross-site scripting in Acronis Cyber Protect 16

LOW 27

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00294 Published 2025-01-02 Fixed in 39169 CWE-79

Vulnerabilities

Filters