Advisories · Technology

Acronis Cyber Protect Cloud Agent.

Every CVE that names Acronis Cyber Protect Cloud Agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-30414 CVE record

CVSS 7.1 High

Weak authentication in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- Authentication bypass
Not analysed yet 28 Oct 2026
CVE-2026-41220 CVE record

CVSS 7.8 High

Out-of-bounds write in Acronis DeviceLock DLP and others
- Acronis DeviceLock DLP
- Acronis Cyber Protect Cloud Agent
- Memory corruption
Not analysed yet 29 Apr 2026
CVE-2026-41952 CVE record

CVSS 7.8 High

Local privilege escalation due to improper input validation.
- Acronis DeviceLock DLP
- Acronis Cyber Protect Cloud Agent
- CWE-123
Not analysed yet 29 Apr 2026
CVE-2025-30413 CVE record

CVSS 4.4 Medium

Incorrect permission assignment in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- Broken access control
Not analysed yet 5 Mar 2026
CVE-2026-28713 CVE record

CVSS 7.1 High

Default credentials set for local privileged user in Virtual Appliance.
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- CWE-1392
Not analysed yet 5 Mar 2026
CVE-2025-11790 CVE record

CVSS 4.4 Medium

Incorrect permission assignment in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- Broken access control
Not analysed yet 5 Mar 2026
CVE-2025-11791 CVE record

CVSS 5.5 Medium

Missing authorization in Acronis Cyber Protect 17 and others
- Acronis Cyber Protect 17
- Acronis Cyber Protect Cloud Agent
- Broken access control
Not analysed yet 5 Mar 2026
CVE-2025-11792 CVE record

CVSS 7.3 High

Uncontrolled search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-427
Not analysed yet 5 Mar 2026
CVE-2026-28727 CVE record

CVSS 7.8 High

Incorrect default permissions in Acronis Cyber Protect 17 and others
- Acronis Cyber Protect 17
- Acronis Cyber Protect Cloud Agent
- Broken access control
Not analysed yet 5 Mar 2026
CVE-2025-30410 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Authentication bypass
Not analysed yet 20 Feb 2026
CVE-2025-9578 CVE record

CVSS 7.8 High

Incorrect permission assignment in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- Broken access control
Not analysed yet 28 Aug 2025
CVE-2025-48963 CVE record

CVSS 7.3 High

Local privilege escalation due to improper soft link handling.
- Acronis Cyber Protect Cloud Agent
- CWE-610
Not analysed yet 28 Aug 2025
CVE-2025-48959 CVE record

CVSS 6.7 Medium

Incorrect default permissions in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- Broken access control
Not analysed yet 4 Jun 2025
CVE-2025-30415 CVE record

CVSS 7.5 High

Denial of service due to improper handling of malformed input.
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- CWE-1286
Not analysed yet 4 Jun 2025
CVE-2025-30409 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- Denial of service
Not analysed yet 24 Apr 2025
CVE-2025-30408 CVE record

CVSS 6.7 Medium

Incorrect permission assignment in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
Not analysed yet 24 Apr 2025
CVE-2025-30407 CVE record

CVSS 6.3 Medium

Untrusted search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-426
Not analysed yet 26 Mar 2025
CVE-2025-24828 CVE record

CVSS 6.3 Medium

Untrusted search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-426
Not analysed yet 31 Jan 2025
CVE-2025-24827 CVE record

CVSS 6.3 Medium

Untrusted search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-426
Not analysed yet 31 Jan 2025
CVE-2025-24829 CVE record

CVSS 6.3 Medium

Untrusted search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-426
Not analysed yet 31 Jan 2025
CVE-2025-24830 CVE record

CVSS 6.3 Medium

Untrusted search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-426
Not analysed yet 31 Jan 2025
CVE-2025-24831 CVE record

CVSS 6.6 Medium

Unquoted search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-428
Not analysed yet 31 Jan 2025
CVE-2024-55542 CVE record

CVSS 4.4 Medium

Local privilege escalation due to excessive permissions assigned to Tray Monitor service.
- Acronis Cyber Protect 16
- Acronis Cyber Protect Cloud Agent
- Privilege escalation
Not analysed yet 2 Jan 2025
CVE-2024-55539 CVE record

CVSS 2.5 Low

Broken or risky cryptographic algorithm in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Weak cryptography or TLS
Not analysed yet 23 Dec 2024
CVE-2024-8903 CVE record

CVSS 4.7 Medium

Execution with unnecessary privileges in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- Privilege escalation
Not analysed yet 23 Sept 2024
CVE-2024-8766 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-427
Not analysed yet 16 Sept 2024
CVE-2024-34016 CVE record

CVSS 6.5 Medium

Uncontrolled search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-427
Not analysed yet 16 Sept 2024
CVE-2024-34011 CVE record

CVSS 6.8 Medium

Incorrect default permissions in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- Broken access control
Not analysed yet 29 Apr 2024
CVE-2024-34010 CVE record

CVSS 8.2 High

Unquoted search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-428
Not analysed yet 29 Apr 2024
CVE-2023-48684 CVE record

CVSS 7.1 High

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- Broken access control
Not analysed yet 29 Apr 2024
CVE-2023-48683 CVE record

CVSS 7.1 High

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
Not analysed yet 29 Apr 2024
CVE-2023-48676 CVE record

CVSS 3.3 Low

Missing authorization in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- Broken access control
Not analysed yet 14 Dec 2023
CVE-2023-48677 CVE record

CVSS 7.3 High

Uncontrolled search path in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Cyber Protect Cloud Agent
- CWE-427
Not analysed yet 12 Dec 2023
CVE-2023-45247 CVE record

CVSS 7.1 High

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
Not analysed yet 9 Oct 2023
CVE-2023-45248 CVE record

CVSS 6.6 Medium

Uncontrolled search path in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- CWE-427
Not analysed yet 9 Oct 2023
CVE-2023-45246 CVE record

CVSS 7.1 High

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
Not analysed yet 6 Oct 2023
CVE-2023-45244 CVE record

CVSS 7.1 High

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
Not analysed yet 6 Oct 2023
CVE-2023-45243 CVE record

CVSS 5.5 Medium

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- Broken access control
Not analysed yet 5 Oct 2023
CVE-2023-45242 CVE record

CVSS 5.5 Medium

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- Broken access control
Not analysed yet 5 Oct 2023
CVE-2023-45241 CVE record

CVSS 4.4 Medium

Sensitive information in log files in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Information disclosure
Not analysed yet 5 Oct 2023
CVE-2023-44213 CVE record

CVSS 3.3 Low

Exposure of personal information in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Information disclosure
Not analysed yet 5 Oct 2023
CVE-2023-44211 CVE record

CVSS 7.1 High

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 16
- Broken access control
Not analysed yet 5 Oct 2023
CVE-2023-44210 CVE record

CVSS 7.3 High

Missing authorization in Acronis Cyber Protect Cloud Agent and others
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- Broken access control
Not analysed yet 4 Oct 2023
CVE-2023-44209 CVE record

CVSS 5.6 Medium

Local privilege escalation due to improper soft link handling.
- Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect 17
- CWE-610
Not analysed yet 4 Oct 2023
CVE-2023-41743 CVE record

CVSS 8.8 High

Improper privilege management in Acronis Cyber Protect Home Office and others
- Acronis Cyber Protect Home Office
- Acronis Cyber Protect Cloud Agent
- Privilege escalation
Not analysed yet 31 Aug 2023