264 matches found
Brotli critical vulnerability
A critical security vulnerability has been identified in the Brotli decompression library. It has been assigned CVE-2026-111497. Acronis security team is investigating which products and services may be affected by this vulnerability. As the investigation progresses, Acronis will update this...
Sensitive information disclosure due to improper token validation
...
Linux binaries have executable stack attribute enabled
...
Protection mechanism failure due to missing binary hardening in Linux executables
...
Security update of third-party dependencies
...
Sensitive information disclosure due to improper token validation
...
Local privilege escalation due to improper authentication
...
Cross-site scripting (XSS) vulnerability due to improper input validation
...
Sensitive information disclosure due to insufficiently protected credentials
...
Sensitive information disclosure due to missing SSL certificate verification affecting one component
...
Sensitive information disclosure and manipulation due to improper token validation
...
Sensitive information disclosure and manipulation due to improper token validation
...
Sensitive information disclosure due to improper authorization
...
PHP critical vulnerabilities
Critical security vulnerabilities have been identified in PHP. The vulnerabilities have been assigned CVE-2026-109618 and CVE-2026-109619. Acronis security team is investigating which products and services may be affected by these vulnerabilities. As the investigation progresses, Acronis will...
Sensitive information disclosure and manipulation in Backup Gateway due to improper authorization checks
...
Sensitive information disclosure and manipulation in Backup Gateway due to improper authorization checks
...
Local privilege escalation due to insecure file permissions
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments...
Security update of Apache HTTP Server
Apache HTTP Server was updated to address a high severity vulnerability...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to EXE hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to improper input validation
...
Local privilege escalation due to improper input validation
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to improper handling of environment variables
...
OpenSSL high severity vulnerability CVE-2025-15467
OpenSSL disclosed CVE-2025-15467, initially rated as critical and later revised to high severity. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability, as the impacted functionality is not in use...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of third-party dependencies
...
Security update of third-party dependencies
...
Credentials are not deleted from Acronis Agent after plan revocation
...
Sensitive information disclosure and manipulation due to improper authentication
...
Default credentials set for local privileged user in Virtual Appliance
...
Unauthorized resource manipulation due to improper authorization checks
...
Local privilege escalation due to improper soft link handling
...
Sensitive information disclosure due to improper configuration of a headless browser
...
Sensitive information disclosure and manipulation due to insufficient authorization checks
...
Unauthorized modification of settings due to insufficient authorization checks
...
Local privilege escalation due to improper directory permissions
...
Unnecessary transmission of sensitive cryptographic material
...
Local privilege escalation due to insecure Unix socket permissions
...
Sensitive information disclosure due to improper authorization checks
...