CVE-2026-28710

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2026-28714

Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2025-30413

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40497, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2026-28726

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2026-28726

Acronis Cyber Protect 17 (Linux, Windows) is affected by CVE-2026-28726 due to improper access control, leading to sensitive information disclosure. Impact per CVSSv3: Confidentiality Low, Integrity None, Availability None; Attack Vector Network, Privileges Required Low, User Interaction None, Sc...

CVE-2025-30413

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40497, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2026-28720

Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2026-28720

Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2026-28719

Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2026-28718

CVE-2026-28718 affects Acronis Cyber Protect 17 (Linux and Windows) prior to build 41186. The vulnerability arises from insufficient input validation in authentication logging, enabling a denial-of-service condition. Multiple connected sources (Red Hat, NVD, ENISA EUVD, CVE lists, and PT-Security...

CVE-2026-28718

Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2026-28713

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent VMware before build 36943, Acronis Cyber Protect 17 VMware before build 41186...

CVE-2026-28711

CVE-2026-28711 is a local privilege escalation affecting Acronis Cyber Protect 17 for Windows prior to build 41186. The root cause is DLL hijacking, enabling elevation of privileges locally. The issue is mitigated by updating to build 41186 (the fix). If exploiting details are not provided in the...

CVE-2025-11791

Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186, Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 41124...

CVE-2026-28727

Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 macOS before build 41186, Acronis Cyber Protect Cloud Agent macOS before build 41124, Acronis True Image macOS before build 42902...

PT-2026-23591

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 Windows versions prior to build 41186 Description A local privilege escalation can occur due to incorrect directory permissions. There is no information available regarding the number of potentially affected devices or...

PT-2026-23598

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect versions prior to build 41186 Description The software suffers from insufficient access control validation, leading to unauthorized data access. Recommendations Update Acronis Cyber Protect to build 41186 or later...

PT-2026-23594

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Description Insufficient authorization checks allow for unauthorized modification of settings. This impacts Acronis Cyber Protect 17 on both Linux and Windows operating systems...

PT-2026-23580

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Linux, macOS, Windows versions prior to build 40497 Acronis Cyber Protect 17 Linux, macOS, Windows versions prior to build 41186 Description Credentials are not deleted from the Acronis Agent after plan...

CVE-2026-53873

creationtimestamp| type| source ---|---|--- 2026-03-03 20:03:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7wx9-6375-f5wh 2026-06-17 18:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moivgiq3wx2h...