Vendor
Acronis
206 known vulnerabilities.
Acronis at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 13 | 1 |
| Sep 2026 | 1 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 4 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 7 | 0 |
| Mar 2026 | 23 | 0 |
| Feb 2026 | 4 | 4 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 2 | 0 |
| Aug 2025 | 2 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 5 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 2 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 14 | 0 |
| Dec 2024 | 1 | 0 |
Most common weaknesses
Products
Acronis Cyber Protect 15 47
Acronis Cyber Protect Cloud Agent 45
Acronis Cyber Protect 17 39
Acronis Cyber Protect 16 36
Acronis Agent 25
Acronis Cyber Protect Home Office 22
Acronis True Image OEM 12
Acronis True Image 11
Acronis Snap Deploy 8
Acronis DeviceLock DLP 7
Acronis True Image 2021 6
Acronis Backup plugin for cPanel & WHM 5
Acronis Cloud Manager 5
Acronis Cyber Files 5
Acronis Cyber Infrastructure 5
Acronis Backup extension for Plesk 4
Acronis Backup plugin for DirectAdmin 3
True Image 2
Acronis True Image for Western Digital 2
Acronis True Image for SanDisk 2
Acronis Cyber Backup 12.5 2
Cyber Backup 1
Cyber Protect 1
True Image 2021 1
Acronis VSS Doctor 1
Cyber Protect < 15 build 35979 0
Cyber Protect Cloud Agent < build 36772 0
Cyber Protect Cloud Agent < build 36943 0
Cyber Backup plugin for cPanel & WHM <1.8.3 0
Cyber Protect < 15 update 5 0
Cyber Protect Home Office < build 40713 0
Cyber Protect < build 40901 0
Latest advisories
-
Medium max 7.4WID-SEC-2026-4194 11 CVEs
Acronis Cyber Protect: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.
-
High max 7.8WID-SEC-2026-1322 2 CVEs
Acronis Cyber Protect Cloud Agent: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Ein lokaler oder entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect Cloud Agent ausnutzen, um seine Privilegien zu erhöhen.
-
Low max 4.4
Acronis Cyber Protect Cloud Agent: Schwachstelle ermöglicht Offenlegung von Informationen
Ein lokaler Angreifer kann eine Schwachstelle in Acronis Cyber Protect ausnutzen, um Informationen offenzulegen.
first Jul 30, 2025 -
High max 8.1WID-SEC-2026-0620 22 CVEs
Acronis Cyber Protect und Cyber Protect Cloud Agent: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, n…
-
Medium max 7.3
Acronis Cyber Protect Cloud Agent: Schwachstelle ermöglicht Privilegieneskalation
Ein lokaler Angreifer kann eine Schwachstelle in Acronis Cyber Protect Cloud Agent ausnutzen, um seine Privilegien zu erhöhen.
first Jul 20, 2025
206 results · Feed
-
Medium 5.9
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber P…
-
Medium 6.3
Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (…
-
High 7.4
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected…
-
Low 3.6
Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected:…
-
Medium 5.7
Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis…
-
High 7.1
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect C…
-
Low 3.1
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Prot…
-
Medium 6.8
Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following pro…
-
High 7.4
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected…
-
Medium 6.2
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber P…
-
Medium 5.3
Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acro…
-
Low 3.3
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affe…
-
Critical 9.1
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affe…
-
High 7.8CVE-2026-87886 Exploited
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin…
KEV Sep 16, 2026 -
High 7.3
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock …
-
High 7.3
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affecte…
-
High 7.3
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock …
-
High 7.3
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock …
-
High 7.8
Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DL…
-
High 7.8
Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DL…
-
Medium 6.7
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock …
-
High 7.8
Local privilege escalation due to improper handling of environment variables. The following products are affected: Acro…
-
Medium 6.7
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image …
-
Medium 6.7
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image …
-
Medium 6.7
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image …
-
Medium 4.3
Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Pro…
-
Medium 5.5
Sensitive information disclosure due to improper configuration of a headless browser. The following products are affect…
-
Medium 4.4
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cybe…
-
Medium 4.3
Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cy…
-
Medium 4.3
Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Pro…
-
High 7.3
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Prote…
-
High 7.3
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Prote…
-
Medium 4.3
Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Ac…
-
Medium 4.3
Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis C…
-
Medium 5.3
Denial of service due to insufficient input validation in authentication logging. The following products are affected: …
-
Medium 5.0
Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Pr…
-
Medium 4.4
Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acro…
-
Medium 6.5
Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyb…
-
Medium 4.8
Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protec…
-
High 7.1
Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cy…