https://vulnogram.org/ Most recent CVEs assigned by Acronis International GmbH (acronis). https://vulnogram.org/seaview/icons/acronis.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-87886 https://vulnogram.org/CVE-2026-87886 Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Back… High Known Exploited Thu, 17 Sep 2026 22:57:18 GMT https://vulnogram.org/CVE-2026-44682 https://vulnogram.org/CVE-2026-44682 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. High Wed, 03 Jun 2026 19:26:29 GMT https://vulnogram.org/CVE-2026-42061 https://vulnogram.org/CVE-2026-42061 Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. High Wed, 03 Jun 2026 19:26:17 GMT https://vulnogram.org/CVE-2026-50033 https://vulnogram.org/CVE-2026-50033 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. High Wed, 03 Jun 2026 19:26:05 GMT https://vulnogram.org/CVE-2026-44609 https://vulnogram.org/CVE-2026-44609 Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. High Wed, 03 Jun 2026 19:25:39 GMT https://vulnogram.org/CVE-2026-41220 https://vulnogram.org/CVE-2026-41220 Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183. High Wed, 29 Apr 2026 13:43:36 GMT https://vulnogram.org/CVE-2026-41952 https://vulnogram.org/CVE-2026-41952 Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183. High Wed, 29 Apr 2026 13:42:55 GMT https://vulnogram.org/CVE-2026-25852 https://vulnogram.org/CVE-2026-25852 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212. Medium Wed, 29 Apr 2026 13:42:23 GMT https://vulnogram.org/CVE-2026-33092 https://vulnogram.org/CVE-2026-33092 Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902. High Fri, 10 Apr 2026 13:17:45 GMT https://vulnogram.org/CVE-2026-33271 https://vulnogram.org/CVE-2026-33271 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902. Medium Thu, 02 Apr 2026 17:06:24 GMT https://vulnogram.org/CVE-2026-27774 https://vulnogram.org/CVE-2026-27774 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. Medium Thu, 02 Apr 2026 17:05:19 GMT https://vulnogram.org/CVE-2026-28728 https://vulnogram.org/CVE-2026-28728 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. Medium Thu, 02 Apr 2026 17:04:45 GMT https://vulnogram.org/CVE-2026-28726 https://vulnogram.org/CVE-2026-28726 Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:57:23 GMT https://vulnogram.org/CVE-2026-28725 https://vulnogram.org/CVE-2026-28725 Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:56:49 GMT https://vulnogram.org/CVE-2025-30413 https://vulnogram.org/CVE-2025-30413 Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 411… Medium Thu, 05 Mar 2026 23:56:29 GMT https://vulnogram.org/CVE-2026-28724 https://vulnogram.org/CVE-2026-28724 Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:55:51 GMT https://vulnogram.org/CVE-2026-28723 https://vulnogram.org/CVE-2026-28723 Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:55:37 GMT https://vulnogram.org/CVE-2026-28722 https://vulnogram.org/CVE-2026-28722 Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. High Thu, 05 Mar 2026 23:55:18 GMT https://vulnogram.org/CVE-2026-28721 https://vulnogram.org/CVE-2026-28721 Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. High Thu, 05 Mar 2026 23:55:01 GMT https://vulnogram.org/CVE-2026-28720 https://vulnogram.org/CVE-2026-28720 Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:54:43 GMT https://vulnogram.org/CVE-2026-28719 https://vulnogram.org/CVE-2026-28719 Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:54:24 GMT https://vulnogram.org/CVE-2026-28718 https://vulnogram.org/CVE-2026-28718 Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:54:05 GMT https://vulnogram.org/CVE-2026-28717 https://vulnogram.org/CVE-2026-28717 Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. Medium Thu, 05 Mar 2026 23:53:46 GMT https://vulnogram.org/CVE-2026-28716 https://vulnogram.org/CVE-2026-28716 Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:52:29 GMT https://vulnogram.org/CVE-2026-28715 https://vulnogram.org/CVE-2026-28715 Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:52:09 GMT https://vulnogram.org/CVE-2026-28714 https://vulnogram.org/CVE-2026-28714 Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:51:47 GMT https://vulnogram.org/CVE-2026-28713 https://vulnogram.org/CVE-2026-28713 Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186. High Thu, 05 Mar 2026 23:51:30 GMT https://vulnogram.org/CVE-2026-28712 https://vulnogram.org/CVE-2026-28712 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. Medium Thu, 05 Mar 2026 23:50:38 GMT https://vulnogram.org/CVE-2026-28711 https://vulnogram.org/CVE-2026-28711 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. Medium Thu, 05 Mar 2026 23:50:16 GMT https://vulnogram.org/CVE-2026-28710 https://vulnogram.org/CVE-2026-28710 Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. High Thu, 05 Mar 2026 23:48:48 GMT https://vulnogram.org/CVE-2026-28709 https://vulnogram.org/CVE-2026-28709 Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Medium Thu, 05 Mar 2026 23:48:07 GMT https://vulnogram.org/CVE-2025-11790 https://vulnogram.org/CVE-2025-11790 Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124. Medium Thu, 05 Mar 2026 23:47:00 GMT https://vulnogram.org/CVE-2025-11791 https://vulnogram.org/CVE-2025-11791 Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Win… Medium Thu, 05 Mar 2026 23:46:27 GMT https://vulnogram.org/CVE-2025-11792 https://vulnogram.org/CVE-2025-11792 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124. High Thu, 05 Mar 2026 23:45:55 GMT https://vulnogram.org/CVE-2026-28727 https://vulnogram.org/CVE-2026-28727 Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) bef… High Thu, 05 Mar 2026 23:45:20 GMT https://vulnogram.org/CVE-2025-30416 https://vulnogram.org/CVE-2025-30416 Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800. Critical Fri, 20 Feb 2026 00:31:27 GMT https://vulnogram.org/CVE-2025-30410 https://vulnogram.org/CVE-2025-30410 Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build… Critical Fri, 20 Feb 2026 00:31:05 GMT https://vulnogram.org/CVE-2025-30412 https://vulnogram.org/CVE-2025-30412 Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800. Critical Fri, 20 Feb 2026 00:30:33 GMT https://vulnogram.org/CVE-2025-30411 https://vulnogram.org/CVE-2025-30411 Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800. Critical Fri, 20 Feb 2026 00:30:14 GMT https://vulnogram.org/CVE-2026-0705 https://vulnogram.org/CVE-2026-0705 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.4.25342.354. Medium Tue, 27 Jan 2026 16:43:42 GMT https://vulnogram.org/CVE-2025-7779 https://vulnogram.org/CVE-2025-7779 Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digita… High Tue, 30 Sep 2025 14:52:46 GMT https://vulnogram.org/CVE-2025-11178 https://vulnogram.org/CVE-2025-11178 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (… High Tue, 30 Sep 2025 14:52:20 GMT https://vulnogram.org/CVE-2025-9578 https://vulnogram.org/CVE-2025-9578 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40734. High Thu, 28 Aug 2025 14:01:46 GMT https://vulnogram.org/CVE-2025-48963 https://vulnogram.org/CVE-2025-48963 Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40296. High Thu, 28 Aug 2025 09:49:57 GMT https://vulnogram.org/CVE-2025-48962 https://vulnogram.org/CVE-2025-48962 Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 (Windows, Linux) before build 39938. Medium Wed, 04 Jun 2025 13:27:43 GMT https://vulnogram.org/CVE-2025-48961 https://vulnogram.org/CVE-2025-48961 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39938. High Wed, 04 Jun 2025 13:26:51 GMT https://vulnogram.org/CVE-2025-48960 https://vulnogram.org/CVE-2025-48960 Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938. Medium Wed, 04 Jun 2025 13:26:27 GMT https://vulnogram.org/CVE-2025-48959 https://vulnogram.org/CVE-2025-48959 Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40077. Medium Wed, 04 Jun 2025 12:02:56 GMT https://vulnogram.org/CVE-2025-30415 https://vulnogram.org/CVE-2025-30415 Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186. High Wed, 04 Jun 2025 12:02:21 GMT https://vulnogram.org/CVE-2025-30409 https://vulnogram.org/CVE-2025-30409 Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39904, Acronis Cyber Protect 17 (Windows) before build 41186. Medium Thu, 24 Apr 2025 13:04:41 GMT