Search vulnerabilities

Results 117

Export CSV
CVE-2025-30414

Local privilege escalation via improper authentication in Acronis Cyber Protect products

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-41952

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-41220

Improper Input Validation Allowing Local Privilege Escalation in Acronis DeviceLock DLP and Cyber Protect Cloud Agent

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-28713

Default Credentials in Acronis Virtual Appliance Enable Local Privilege Escalation

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-28721

Local Privilege Escalation through Improper Soft Link Handling in Acronis Cyber Protect 17

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-28716

Improper Authorization Checks in Acronis Cyber Protect 17 Allow Information Disclosure and Manipulation

Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

CVSS 3.0 · 4.4 Medium EPSS < 1% KEV · Not listed
CVE-2026-28717

Local Privilege Escalation via Improper Directory Permissions in Acronis Cyber Protect 17

Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

CVSS 3.0 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2026-28720

Insufficient Authorization Checks Allow Unauthorized Settings Modification in Acronis Cyber Protect 17

Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
CVE-2026-28722

Improper Symbolic Link Handling Enables Local Privilege Escalation in Acronis Cyber Protect 17

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors