Acronis vulnerabilities
206 CVEs and advisories name Acronis as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-87879Sensitive information disclosure due to improper token validation.
- CVE-2026-87878Linux binaries have executable stack attribute enabled.
- CVE-2026-87102Sensitive information disclosure and manipulation due to improper token validation.
- CVE-2026-87100Protection mechanism failure due to missing binary hardening in Linux executables.
- CVE-2026-87099Cross-site scripting (XSS) vulnerability due to improper input validation.
- CVE-2025-30414Local privilege escalation due to improper authentication.
- CVE-2026-87098Sensitive information disclosure due to improper authorization.
- CVE-2026-87880Sensitive information disclosure due to missing SSL certificate verification affecting one component.
- CVE-2026-87103Sensitive information disclosure and manipulation due to improper token validation.
- CVE-2026-87101Sensitive information disclosure due to improper token validation.
- CVE-2026-87097Sensitive information disclosure due to insufficiently protected credentials.
- CVE-2026-87096Sensitive information disclosure and manipulation due to improper authorization checks.
- CVE-2026-87095Sensitive information disclosure and manipulation due to improper authorization checks.
- CVE-2026-87886Local privilege escalation due to insecure file permissions.
- CVE-2026-44682Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-42061Local privilege escalation due to excessive permissions assigned to child processes.
- CVE-2026-50033Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-44609Local privilege escalation due to EXE hijacking vulnerability.
- CVE-2026-41220Local privilege escalation due to improper input validation.
- CVE-2026-41952Local privilege escalation due to improper input validation.
- CVE-2026-25852Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-33092Local privilege escalation due to improper handling of environment variables.
- CVE-2026-33271Local privilege escalation due to insecure folder permissions.
- CVE-2026-27774Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-28728Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-28726Sensitive information disclosure due to improper access control.
- CVE-2026-28725Sensitive information disclosure due to improper configuration of a headless browser.
- CVE-2025-30413Credentials are not deleted from Acronis Agent after plan revocation.
- CVE-2026-28724Unauthorized data access due to insufficient access control validation.
- CVE-2026-28723Unauthorized report deletion due to insufficient access control.