Vulnerabilities

TI-2026-81806 CVE-2026-87879 · GHSA-95xp-q2cv-4p3v

Sensitive information disclosure in Acronis Cyber Protect 17

LOW 26

Sensitive information disclosure due to improper token validation.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00216 Published 2026-10-28 Fixed in 42587 CWE-347

TI-2026-81805 CVE-2026-87878 · GHSA-hwrq-7779-h48x

Acronis Cyber Protect Linux binaries have executable stack enabled

LOW 29

Linux binaries have executable stack attribute enabled.

CVSS 3.0MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00142 Published 2026-10-28 Fixed in 42587 CWE-693

TI-2026-81803 CVE-2026-87102 · GHSA-rq2c-9v6f-jv53

Acronis Cyber Protect 17 token validation disclosure and manipulation

LOW 34

Sensitive information disclosure and manipulation due to improper token validation.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.00224 Published 2026-10-28 Fixed in 42587 CWE-347

TI-2026-81801 CVE-2026-87100 · GHSA-4cvj-f2g8-85g6

Missing binary hardening in Acronis Cyber Protect 17 for Linux

LOW 16

Protection mechanism failure due to missing binary hardening in Linux executables.

CVSS 3.0LOW 3.6 Local Low privileges No interaction EPSS 0.00097 Published 2026-10-28 Fixed in 42587 CWE-693

TI-2026-81800 CVE-2026-87099 · GHSA-m2j6-gmm3-8683

Cross-site scripting in Acronis Cyber Protect 17

LOW 27

Cross-site scripting (XSS) vulnerability due to improper input validation.

CVSS 3.0MEDIUM 5.7 Network High privileges User interaction EPSS 0.00242 Published 2026-10-28 Fixed in 42587 CWE-79

TI-2025-43981 CVE-2025-30414 · GHSA-2qff-gqpm-828r

Local privilege escalation in Acronis Cyber Protect products

LOW 33

Local privilege escalation due to improper authentication.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00212 Published 2026-10-28 Fixed in 42569, 42587 CWE-1390

TI-2026-81799 CVE-2026-87098 · GHSA-7x37-4x7g-2vpr

Sensitive information disclosure due to improper authorization

LOW 14

Sensitive information disclosure due to improper authorization.

CVSS 3.0LOW 3.1 Network Low privileges No interaction EPSS 0.00178 Published 2026-10-28 Fixed in 42587 CWE-639

TI-2026-81807 CVE-2026-87880 · GHSA-p62g-cwhq-pxhg

Acronis Cyber Protect 17 lacks SSL certificate checks, leaking data

LOW 31

Sensitive information disclosure due to missing SSL certificate verification affecting one component.

CVSS 3.0MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.00119 Published 2026-10-28 Fixed in 42587 CWE-295

TI-2026-81804 CVE-2026-87103 · GHSA-qfm9-xfqx-vv8j

Token validation flaw in Acronis Cyber Protect 17 exposes data

LOW 34

Sensitive information disclosure and manipulation due to improper token validation.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.00224 Published 2026-10-28 Fixed in 42587 CWE-347

TI-2026-81802 CVE-2026-87101 · GHSA-xqx8-5pg6-fmv7

Sensitive information disclosure in Acronis Cyber Protect 17

LOW 26

Sensitive information disclosure due to improper token validation.

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.00096 Published 2026-10-28 Fixed in 42587 CWE-347

TI-2026-81798 CVE-2026-87097 · GHSA-665r-wj4r-wv75

Sensitive information disclosure in Acronis Cyber Protect 17

LOW 23

Sensitive information disclosure due to insufficiently protected credentials.

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00223 Published 2026-10-28 Fixed in 42587 CWE-522

TI-2026-78573 CVE-2026-87096 · GHSA-w28j-37x5-4v96

Incorrect authorization in Acronis Cyber Infrastructure

LOW 15

Sensitive information disclosure and manipulation due to improper authorization checks.

CVSS 3.0LOW 3.3 Network High privileges No interaction EPSS 0.00131 Published 2026-10-21 Fixed in 6.0.1-112, 6.1.1-64 +1 CWE-863

TI-2026-78572 CVE-2026-87095 · GHSA-54qj-98fw-w229

Incorrect authorization in Acronis Cyber Infrastructure

MEDIUM 47

Sensitive information disclosure and manipulation due to improper authorization checks.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00242 Published 2026-10-21 Fixed in 6.0.1-112, 6.1.1-64 +1 CWE-863

TI-2026-59964 CVE-2026-87886 · GHSA-hrq3-qgq7-jm9x

Incorrect default permissions in Acronis Backup plugin for cPanel & WHM

CRITICAL 93KEV

Local privilege escalation due to insecure file permissions.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00233 Published 2026-09-17 Fixed in 1.9.3.1021, 1.8.11.638 +1 CWE-276

TI-2026-32578 CVE-2026-44682 · GHSA-3w7q-wcq7-c2vr

Uncontrolled search path in Acronis DeviceLock DLP

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00115 Published 2026-06-03 Fixed in 9.0.15051.93227 CWE-427

TI-2026-30434 CVE-2026-42061 · GHSA-jgh4-c962-w9qg

Local privilege escalation due to excessive permissions assigned to child processes.

LOW 33

Local privilege escalation due to excessive permissions assigned to child processes.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00106 Published 2026-06-03 Fixed in 9.0.15051.93227 CWE-250

TI-2026-36858 CVE-2026-50033 · GHSA-769h-95cg-2m99

Uncontrolled search path in Acronis DeviceLock DLP

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00115 Published 2026-06-03 Fixed in 9.0.15051.93227 CWE-427

TI-2026-32518 CVE-2026-44609 · GHSA-qgh2-4v7g-2cmc

Uncontrolled search path in Acronis DeviceLock DLP

LOW 33

Local privilege escalation due to EXE hijacking vulnerability.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00106 Published 2026-06-03 Fixed in 9.0.15051.93227 CWE-427

TI-2026-29833 CVE-2026-41220 · GHSA-g55q-x3wr-746f

Out-of-bounds write in Acronis DeviceLock DLP

LOW 35

Local privilege escalation due to improper input validation.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00107 Published 2026-04-29 Fixed in 9.0.93212, 42183 CWE-787

TI-2026-30348 CVE-2026-41952 · GHSA-9hw6-w5cr-vqxm

Local privilege escalation due to improper input validation.

LOW 35

Local privilege escalation due to improper input validation.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00107 Published 2026-04-29 Fixed in 9.0.93212, 42183 CWE-123

TI-2026-20897 CVE-2026-25852 · GHSA-hxj2-hjxp-rpjq

Uncontrolled search path in Acronis DeviceLock DLP

LOW 30

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.0009 Published 2026-04-29 Fixed in 9.0.93212 CWE-427

TI-2026-25528 CVE-2026-33092 · GHSA-xr7f-6r6v-cqmm

Local privilege escalation due to improper handling of environment variables.

LOW 35

Local privilege escalation due to improper handling of environment variables.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00173 Published 2026-04-10 Fixed in 42571, 42902 CWE-15

TI-2026-25686 CVE-2026-33271 · GHSA-2ph3-3852-f6r9

Incorrect permission assignment in Acronis True Image

LOW 30

Local privilege escalation due to insecure folder permissions.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00092 Published 2026-04-02 Fixed in 42902 CWE-732

TI-2026-22132 CVE-2026-27774 · GHSA-phg3-8rj7-h8r5

Uncontrolled search path in Acronis True Image

LOW 30

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.001 Published 2026-04-02 Fixed in 42902 CWE-427

TI-2026-22939 CVE-2026-28728 · GHSA-r5hg-g2g5-9h8f

Uncontrolled search path in Acronis True Image

LOW 30

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.001 Published 2026-04-02 Fixed in 42902 CWE-427

Vulnerabilities

Filters