acronis Vulnerability Advisory Catalog

Total 171 security vulnerabilities recorded for acronis software and firmware.

← Back to All Vendors
Component: agent

Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect...

📅 2026-03-06
CVSS 7.1 Dossier →
Component: agent

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, m...

📅 2026-03-06
CVSS 4.4 Dossier →
CVE-2025-30416 CRITICAL
Component: cyber_protect

Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows...

📅 2026-02-20
CVSS 10.0 Dossier →
CVE-2025-30412 CRITICAL
Component: cyber_protect

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windo...

📅 2026-02-20
CVSS 10.0 Dossier →
CVE-2025-30411 CRITICAL
Component: cyber_protect

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windo...

📅 2026-02-20
CVSS 10.0 Dossier →
Component: cyber_protect

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39...

📅 2025-01-02
CVSS 7.8 Dossier →
Component: cyber_protect

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Pr...

📅 2025-01-02
CVSS 6.1 Dossier →
Component: cyber_protect

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39...

📅 2025-01-02
CVSS 7.8 Dossier →
Component: cyber_files

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Windows) befo...

📅 2024-10-17
CVSS 4.8 Dossier →
Component: cyber_files

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x2...

📅 2024-10-17
CVSS 7.3 Dossier →
Component: cyber_files

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x2...

📅 2024-10-17
CVSS 7.3 Dossier →
Component: cyber_files

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x2...

📅 2024-10-17
CVSS 7.8 Dossier →
Component: cyber_files

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24....

📅 2024-10-17
CVSS 5.7 Dossier →
CVE-2024-49388 CRITICAL
Component: cyber_protect

Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befor...

📅 2024-10-15
CVSS 9.1 Dossier →
Component: cyber_protect

Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windo...

📅 2024-10-15
CVSS 7.5 Dossier →
Component: cyber_protect

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Pr...

📅 2024-10-15
CVSS 4.3 Dossier →
Component: cyber_protect

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Pro...

📅 2024-10-15
CVSS 4.3 Dossier →
Component: cyber_protect

Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Pr...

📅 2024-10-15
CVSS 4.3 Dossier →
Component: snap_deploy

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569....

📅 2024-08-29
CVSS 7.3 Dossier →
Component: snap_deploy

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4...

📅 2024-08-29
CVSS 5.5 Dossier →
Component: snap_deploy

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569....

📅 2024-08-29
CVSS 7.3 Dossier →
CVE-2023-45249 CRITICAL
Component: cyber_infrastructure

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-6...

📅 2024-07-24
CVSS 9.8 Dossier →
Component: cyber_protect

Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 ...

📅 2024-07-16
CVSS 6.5 Dossier →
Component: cloud_manager

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.2...

📅 2024-06-14
CVSS 4.4 Dossier →
Page 2 of 8 (171 Total Records)