Acronis vulnerabilities
206 CVEs and advisories name Acronis as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-28722Local privilege escalation due to improper soft link handling.
- CVE-2026-28721Local privilege escalation due to improper soft link handling.
- CVE-2026-28720Unauthorized modification of settings due to insufficient authorization checks.
- CVE-2026-28719Unauthorized resource manipulation due to improper authorization checks.
- CVE-2026-28718Denial of service due to insufficient input validation in authentication logging.
- CVE-2026-28717Local privilege escalation due to improper directory permissions.
- CVE-2026-28716Information disclosure and manipulation due to improper authorization checks.
- CVE-2026-28715Sensitive information disclosure due to improper authorization checks.
- CVE-2026-28714Unnecessary transmission of sensitive cryptographic material.
- CVE-2026-28713Default credentials set for local privileged user in Virtual Appliance.
- CVE-2026-28712Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-28711Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-28710Sensitive information disclosure and manipulation due to improper authentication.
- CVE-2026-28709Unauthorized resource manipulation due to improper authorization checks.
- CVE-2025-11790Credentials are not deleted from Acronis Agent after plan revocation.
- CVE-2025-11791Sensitive information disclosure and manipulation due to insufficient authorization checks.
- CVE-2025-11792Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2026-28727Local privilege escalation due to insecure Unix socket permissions.
- CVE-2025-30416Sensitive data disclosure and manipulation due to missing authorization.
- CVE-2025-30410Sensitive data disclosure and manipulation due to missing authentication.
- CVE-2025-30412Sensitive data disclosure and manipulation due to improper authentication.
- CVE-2025-30411Sensitive data disclosure and manipulation due to improper authentication.
- CVE-2026-0705Local privilege escalation due to insecure folder permissions.
- CVE-2025-7779Local privilege escalation due to insecure XPC service configuration.
- CVE-2025-11178Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2025-9578Local privilege escalation due to insecure folder permissions.
- CVE-2025-48963Local privilege escalation due to improper soft link handling.
- CVE-2025-48962Sensitive information disclosure due to SSRF.
- CVE-2025-48961Local privilege escalation due to insecure folder permissions.
- CVE-2025-48960Weak server key used for TLS encryption.