Acronis
218 CVEs across 40 Acronis products. Browse Acronis vulnerabilities, severities, and proof-of-concept exploits.
Acronis products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-50033 | High | 7.3 | 2026-06-03 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.932… |
CVE-2026-44682 | High | 7.3 | 2026-06-03 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.932… |
CVE-2026-44609 | High | 7.3 | 2026-06-03 | Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.932… |
CVE-2026-42061 | High | 7.3 | 2026-06-03 | Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) befo… |
CVE-2026-41952 | High | 7.8 | 2026-04-29 | Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acro… |
CVE-2026-41220 | High | 7.8 | 2026-04-29 | Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acro… |
CVE-2026-25852 | Medium | 6.7 | 2026-04-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212. |
CVE-2026-33092 | High | 7.8 | 2026-04-10 | Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build… |
CVE-2026-33271 | Medium | 6.7 | 2026-04-02 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902. |
CVE-2026-28728 | Medium | 6.7 | 2026-04-02 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. |
CVE-2026-27774 | Medium | 6.7 | 2026-04-02 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. |
CVE-2026-28727 | High | 7.8 | 2026-03-06 | Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, A… |
CVE-2026-28726 | Medium | 4.3 | 2026-03-06 | Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41… |
CVE-2026-28725 | Medium | 5.5 | 2026-03-06 | Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Win… |
CVE-2026-28724 | Medium | 4.3 | 2026-03-06 | Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before b… |
CVE-2026-28723 | Medium | 4.3 | 2026-03-06 | Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41… |
CVE-2026-28722 | High | 7.3 | 2026-03-06 | Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
CVE-2026-28721 | High | 7.3 | 2026-03-06 | Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
CVE-2026-28720 | Medium | 4.3 | 2026-03-06 | Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)… |
CVE-2026-28719 | Medium | 4.3 | 2026-03-06 | Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before… |
CVE-2026-28718 | High | 7.5 | 2026-03-06 | Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows… |
CVE-2026-28717 | Medium | 5.0 | 2026-03-06 | Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
CVE-2026-28716 | Medium | 4.4 | 2026-03-06 | Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) be… |
CVE-2026-28715 | Medium | 6.5 | 2026-03-06 | Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before bu… |
CVE-2026-28714 | Medium | 4.8 | 2026-03-06 | Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. |
CVE-2026-28713 | High | 7.1 | 2026-03-06 | Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before… |
CVE-2026-28712 | Medium | 6.3 | 2026-03-06 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
CVE-2026-28711 | Medium | 6.3 | 2026-03-06 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
CVE-2026-28710 | Critical | 9.8 | 2026-03-06 | Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows… |
CVE-2026-28709 | Medium | 4.3 | 2026-03-06 | Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before… |
CVE-2025-30413 | Medium | 4.4 | 2026-03-06 | Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Win… |
CVE-2025-11792 | High | 7.3 | 2026-03-06 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41… |
CVE-2025-11791 | High | 7.1 | 2026-03-06 | Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linu… |
CVE-2025-11790 | Medium | 4.4 | 2026-03-06 | Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Win… |
CVE-2025-30416 | Critical | 10.0 | 2026-02-20 | Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before… |
CVE-2025-30412 | Critical | 10.0 | 2026-02-20 | Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befor… |
CVE-2025-30411 | Critical | 10.0 | 2026-02-20 | Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befor… |
CVE-2025-30410 | Critical | 9.8 | 2026-02-20 | Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS… |
CVE-2026-0705 | Medium | 6.7 | 2026-01-27 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.4.25342.354. |
CVE-2025-7779 | High | 8.8 | 2025-09-30 | Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acron… |
CVE-2025-11178 | High | 7.3 | 2025-09-30 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis Tr… |
CVE-2025-9578 | High | 7.8 | 2025-08-28 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40… |
CVE-2025-48963 | High | 7.3 | 2025-08-28 | Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) b… |
CVE-2025-48962 | Medium | 4.3 | 2025-06-04 | Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 (Windows, Linux) before build 39938. |
CVE-2025-48961 | High | 7.3 | 2025-06-04 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39938. |
CVE-2025-48960 | Medium | 5.9 | 2025-06-04 | Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938. |
CVE-2025-48959 | Medium | 6.7 | 2025-06-04 | Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 4007… |
CVE-2025-30415 | High | 7.5 | 2025-06-04 | Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) b… |
CVE-2025-30409 | Medium | 5.5 | 2025-04-24 | Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build… |
CVE-2025-30408 | Medium | 6.7 | 2025-04-24 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39… |
CVE-2025-30407 | Medium | 6.3 | 2025-03-26 | Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before bui… |
CVE-2025-24832 | Medium | 5.5 | 2025-02-27 | Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for… |
CVE-2025-24831 | Medium | 6.6 | 2025-01-31 | Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before b… |
CVE-2025-24830 | Medium | 6.3 | 2025-01-31 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39… |
CVE-2025-24829 | Medium | 6.3 | 2025-01-31 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39… |
CVE-2025-24828 | Medium | 6.3 | 2025-01-31 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39… |
CVE-2025-24827 | Medium | 6.3 | 2025-01-31 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39… |
CVE-2025-24826 | Medium | 6.7 | 2025-01-28 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4625. |
CVE-2024-56414 | Medium | 5.5 | 2025-01-02 | Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. |
CVE-2024-56413 | Medium | 6.1 | 2025-01-02 | Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. |
CVE-2024-55543 | High | 7.8 | 2025-01-02 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. |
CVE-2024-55542 | Medium | 4.4 | 2025-01-02 | Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux… |
CVE-2024-55541 | Medium | 6.1 | 2025-01-02 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-55540 | High | 7.8 | 2025-01-02 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. |
CVE-2024-55538 | Medium | 4.0 | 2025-01-02 | Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build 41725, Acronis Tru… |
CVE-2024-49385 | Medium | 5.5 | 2025-01-02 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 41736, Acro… |
CVE-2024-55539 | Low | 2.5 | 2024-12-23 | Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185, Acronis Cyber Prote… |
CVE-2024-34015 | Low | 3.3 | 2024-11-11 | Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cP… |
CVE-2024-34014 | Medium | 5.5 | 2024-11-11 | Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (L… |
CVE-2024-49392 | Medium | 4.8 | 2024-10-17 | Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Windows) before build… |
CVE-2024-49391 | High | 7.3 | 2024-10-17 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. |
CVE-2024-49390 | High | 7.3 | 2024-10-17 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. |
CVE-2024-49389 | High | 7.8 | 2024-10-17 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. |
CVE-2024-49386 | Medium | 5.7 | 2024-10-17 | Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. |
CVE-2024-49388 | Critical | 9.1 | 2024-10-15 | Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 3… |
CVE-2024-49387 | High | 7.5 | 2024-10-15 | Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befor… |
CVE-2024-49384 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-49383 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (… |
CVE-2024-49382 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-8903 | Medium | 4.7 | 2024-09-23 | Local active protection service settings manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Cyber Protect Clou… |
CVE-2024-8767 | Critical | 9.9 | 2024-09-17 | Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WH… |
CVE-2024-8766 | Medium | 6.7 | 2024-09-16 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38… |
CVE-2024-34016 | Medium | 6.5 | 2024-09-16 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38… |
CVE-2024-34019 | High | 7.3 | 2024-08-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. |
CVE-2024-34018 | Medium | 5.5 | 2024-08-29 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. |
CVE-2024-34017 | High | 7.3 | 2024-08-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. |
CVE-2023-45249 | Critical | 9.8 | 2024-07-24 | Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acroni… |
CVE-2024-34013 | High | 7.8 | 2024-07-18 | Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396, Acron… |
CVE-2022-45449 | Medium | 6.5 | 2024-07-16 | Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows… |
CVE-2024-34012 | Medium | 4.4 | 2024-06-14 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.24135.272. |
CVE-2024-34011 | Medium | 6.8 | 2024-04-29 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37… |
CVE-2024-34010 | High | 8.2 | 2024-04-29 | Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before b… |
CVE-2023-48684 | High | 7.1 | 2024-04-29 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux… |
CVE-2023-48683 | High | 7.1 | 2024-04-29 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux… |
CVE-2023-48682 | Medium | 5.4 | 2024-02-27 | Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. |
CVE-2023-48681 | Medium | 6.1 | 2024-02-27 | Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) bef… |
CVE-2023-48680 | Medium | 5.5 | 2024-02-27 | Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windo… |
CVE-2023-48679 | Medium | 5.4 | 2024-02-27 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16… |
CVE-2023-48678 | Medium | 5.5 | 2024-02-27 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before buil… |
CVE-2023-48676 | High | 7.1 | 2023-12-14 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows… |