Vulnerabilities

TI-2025-10810 CVE-2025-11790 · GHSA-24jx-cr55-jpm5

Incorrect permission assignment in Acronis Cyber Protect Cloud Agent

LOW 19

Credentials are not deleted from Acronis Agent after plan revocation.

CVSS 3.0MEDIUM 4.4 Local High privileges No interaction EPSS 0.00133 Published 2026-03-05 Fixed in 41124 CWE-732

TI-2025-10811 CVE-2025-11791 · GHSA-7gg7-8qp9-3qr4

LOW 30

Sensitive information disclosure and manipulation due to insufficient authorization checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00109 Published 2026-03-05 Fixed in 41186, 41124 CWE-862

TI-2025-10812 CVE-2025-11792 · GHSA-x2j4-rcg2-cv5w

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00126 Published 2026-03-05 Fixed in 41124 CWE-427

TI-2026-22938 CVE-2026-28727 · GHSA-2qwf-43v4-fqqq

LOW 35

Local privilege escalation due to insecure Unix socket permissions.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00111 Published 2026-03-05 Fixed in 41186, 41124 +1 CWE-276