CVE Program partner

Acronis

Acronis International GmbH

API
CVEs, 365 days40189 all time, 0 rejected
Quality66%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions0%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationAcronis International GmbH
RoleCNA
TypeVendor
Reports tomitre
ScopeAll Acronis products, including Acronis Cyber Protect, Acronis Cyber Protect Home Office, Acronis DeviceLock DLP, and Acronis Snap Deploy.
Advisorieshttps://security-advisory.acronis.com/advisories

Latest CVEs · RSS

  • CVE-2026-87886 2026-09-17 · CVSS 7.8
    Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.
  • CVE-2026-44682 2026-06-03 · CVSS 7.3
    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.9322
  • CVE-2026-42061 2026-06-03 · CVSS 7.3
    Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) befor
  • CVE-2026-50033 2026-06-03 · CVSS 7.3
    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.9322
  • CVE-2026-44609 2026-06-03 · CVSS 7.3
    Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.9322
  • CVE-2026-41220 2026-04-29 · CVSS 7.8
    Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acron
  • CVE-2026-41952 2026-04-29 · CVSS 7.8
    Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acron
  • CVE-2026-25852 2026-04-29 · CVSS 6.7
    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.
  • CVE-2026-33092 2026-04-10 · CVSS 7.8
    Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 4
  • CVE-2026-33271 2026-04-02 · CVSS 6.7
    Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.
  • CVE-2026-27774 2026-04-02 · CVSS 6.7
    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
  • CVE-2026-28728 2026-04-02 · CVSS 6.7
    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
  • CVE-2026-28726 2026-03-05 · CVSS 4.3
    Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 411
  • CVE-2026-28725 2026-03-05 · CVSS 5.5
    Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Wind
  • CVE-2025-30413 2026-03-05 · CVSS 4.4
    Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Wind
  • CVE-2026-28724 2026-03-05 · CVSS 4.3
    Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before bu
  • CVE-2026-28723 2026-03-05 · CVSS 4.3
    Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 411
  • CVE-2026-28722 2026-03-05 · CVSS 7.3
    Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
  • CVE-2026-28721 2026-03-05 · CVSS 7.3
    Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
  • CVE-2026-28720 2026-03-05 · CVSS 4.3
    Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) b
  • CVE-2026-28719 2026-03-05 · CVSS 4.3
    Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before b
  • CVE-2026-28718 2026-03-05 · CVSS 5.3
    Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)
  • CVE-2026-28717 2026-03-05 · CVSS 5.0
    Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
  • CVE-2026-28716 2026-03-05 · CVSS 4.4
    Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) bef
  • CVE-2026-28715 2026-03-05 · CVSS 6.5
    Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before bui

All CVE Program partners