251 matches found
Local privilege escalation due to insecure file permissions
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments...
Unauthenticated attacker having local code execution may tamper with microservice API
...
Sensitive information disclosure and manipulation due to improper authorization
...
Local privilege escalation due to DLL hijacking vulnerability
...
Replace satori/go.uuid dependency
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to a DLL hijacking vulnerability
...
MOVEit transfer critical vulnerability
The Progress Community team released a security advisory and fixes for one critical severity security issue affecting all MOVEit Transfer versions. The issue was assigned CVE-2023-34362. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerabilit...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of third-party dependencies
...
Local active protection service settings manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Security update of libxml2 dependency
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information manipulation due to cross-site request forgery
...
Sensitive information disclosure due to improper access control
...
Sensitive information disclosure due to improper configuration of a headless browser
...
Unnecessary transmission of sensitive cryptographic material
...
Security update of Elasticsearch dependency
...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
OpenSSL high severity vulnerability CVE-2025-15467
OpenSSL disclosed CVE-2025-15467, initially rated as critical and later revised to high severity. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability, as the impacted functionality is not in use...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Apache Tomcat dependency
...
Sensitive information disclosure and manipulation due to missing authorization
...
Local privilege escalation due to improper soft link handling
...
Unauthorized report deletion due to insufficient access control
...
Default credentials set for local privileged user in Virtual Appliance
...
Local privilege escalation due to improper soft link handling
...
Stored cross-site scripting (XSS) vulnerability in protection plan name
...
Sensitive information disclosure due to insufficient token field masking
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to improper handling of environment variables
...
Denial of service due to insufficient input validation in authentication logging
...
Sensitive information disclosure and manipulation due to insufficient authorization checks
...
Local privilege escalation due to DLL hijacking vulnerability
...
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to insecure folder permissions
Acronis Snap Deploy 6 License Server stored license serial numbers in cleartext in the file C:\ProgramData\Acronis\License Server\keys.xml, which was accessible to all users on the system. This allowed an authenticated local attacker with access to the file to retrieve and misuse the serial numbe...
Sensitive information manipulation due to cross-site request forgery
...