Vulnerabilities

TI-2026-22937 CVE-2026-28726 · GHSA-m2gv-468v-rj9v

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Sensitive information disclosure due to improper access control.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00189 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22936 CVE-2026-28725 · GHSA-rvxj-27xq-j8mc

Incorrect permission assignment in Acronis Cyber Protect 17

LOW 24

Sensitive information disclosure due to improper configuration of a headless browser.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-03-05 Fixed in 41186 CWE-732

TI-2025-21715 CVE-2025-30413 · GHSA-cwh6-5f6j-h3f9

Incorrect permission assignment in Acronis Cyber Protect Cloud Agent

LOW 20

Credentials are not deleted from Acronis Agent after plan revocation.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00172 Published 2026-03-05 Fixed in 40497, 41186 CWE-732

TI-2026-22935 CVE-2026-28724 · GHSA-g9c5-vhp6-c68r

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized data access due to insufficient access control validation.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00189 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22934 CVE-2026-28723 · GHSA-2xpv-2vp6-3v7h

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized report deletion due to insufficient access control.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22933 CVE-2026-28722 · GHSA-cv6c-2998-rcj3

Local privilege escalation due to improper soft link handling.

LOW 33

Local privilege escalation due to improper soft link handling.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00164 Published 2026-03-05 Fixed in 41186 CWE-610

TI-2026-22932 CVE-2026-28721 · GHSA-3x6x-hp89-vcmq

Local privilege escalation due to improper soft link handling.

LOW 33

Local privilege escalation due to improper soft link handling.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00164 Published 2026-03-05 Fixed in 41186 CWE-610

TI-2026-22931 CVE-2026-28720 · GHSA-vmwm-8rvf-246x

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized modification of settings due to insufficient authorization checks.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22930 CVE-2026-28719 · GHSA-48v9-j4g9-9p23

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized resource manipulation due to improper authorization checks.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22929 CVE-2026-28718 · GHSA-7fqq-633v-44rr

Denial of service due to insufficient input validation in authentication logging.

LOW 39

Denial of service due to insufficient input validation in authentication logging.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-03-05 Fixed in 41186 CWE-779

TI-2026-22928 CVE-2026-28717 · GHSA-xc5m-w25p-gg57

Incorrect default permissions in Acronis Cyber Protect 17

LOW 24

Local privilege escalation due to improper directory permissions.

CVSS 3.0MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00131 Published 2026-03-05 Fixed in 41186 CWE-276

TI-2026-22927 CVE-2026-28716 · GHSA-jf55-8wcc-gvqh

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Information disclosure and manipulation due to improper authorization checks.

CVSS 3.0MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00107 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22926 CVE-2026-28715 · GHSA-ffgg-g824-6mxj

Incorrect authorization in Acronis Cyber Protect 17

LOW 29

Sensitive information disclosure due to improper authorization checks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00316 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2026-22925 CVE-2026-28714 · GHSA-3q66-2qch-5x6m

Insufficiently protected credentials in Acronis Cyber Protect 17

LOW 21

Unnecessary transmission of sensitive cryptographic material.

CVSS 3.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00183 Published 2026-03-05 Fixed in 41186 CWE-522

TI-2026-22924 CVE-2026-28713 · GHSA-p4ch-hvfq-qqq4

Default credentials set for local privileged user in Virtual Appliance.

LOW 33

Default credentials set for local privileged user in Virtual Appliance.

CVSS 3.0HIGH 7.1 Network No auth User interaction EPSS 0.00202 Published 2026-03-05 Fixed in 36943, 41186 CWE-1392

TI-2026-22923 CVE-2026-28712 · GHSA-q9mw-gr87-7j3r

Uncontrolled search path in Acronis Cyber Protect 17

LOW 29

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00104 Published 2026-03-05 Fixed in 41186 CWE-427

TI-2026-22922 CVE-2026-28711 · GHSA-45c9-wrjh-8h56

Uncontrolled search path in Acronis Cyber Protect 17

LOW 29

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00104 Published 2026-03-05 Fixed in 41186 CWE-427

TI-2026-22921 CVE-2026-28710 · GHSA-pxv9-5jrr-rmrx

Weak authentication in Acronis Cyber Protect 17

MEDIUM 43

Sensitive information disclosure and manipulation due to improper authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00471 Published 2026-03-05 Fixed in 41186 CWE-1390

TI-2026-22920 CVE-2026-28709 · GHSA-226g-qx73-56w6

Incorrect authorization in Acronis Cyber Protect 17

LOW 19

Unauthorized resource manipulation due to improper authorization checks.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-05 Fixed in 41186 CWE-863

TI-2025-10811 CVE-2025-11791 · GHSA-7gg7-8qp9-3qr4

Missing authorization in Acronis Cyber Protect 17

LOW 30

Sensitive information disclosure and manipulation due to insufficient authorization checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2026-03-05 Fixed in 41186, 41124 CWE-862

TI-2026-22938 CVE-2026-28727 · GHSA-2qwf-43v4-fqqq

Incorrect default permissions in Acronis Cyber Protect 17

LOW 35

Local privilege escalation due to insecure Unix socket permissions.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00111 Published 2026-03-05 Fixed in 41186, 41124 +1 CWE-276

Vulnerabilities

Filters