251 matches found
PHP critical vulnerabilities
Critical security vulnerabilities have been identified in PHP. The vulnerabilities have been assigned CVE-2026-109618 and CVE-2026-109619. Acronis security team is investigating which products and services may be affected by these vulnerabilities. As the investigation progresses, Acronis will...
Sensitive information disclosure and manipulation due to improper authorization checks
...
Sensitive information disclosure and manipulation due to improper authorization checks
...
Local privilege escalation due to insecure file permissions
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Security update of Apache HTTP Server
Apache HTTP Server was updated to address a high severity vulnerability...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to EXE hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to improper input validation
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to improper input validation
...
OpenSSL high severity vulnerability CVE-2025-15467
OpenSSL disclosed CVE-2025-15467, initially rated as critical and later revised to high severity. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability, as the impacted functionality is not in use...
Local privilege escalation due to improper handling of environment variables
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of third-party dependencies
...
Security update of third-party dependencies
...
Local privilege escalation due to DLL hijacking vulnerability
...
Credentials are not deleted from Acronis Agent after plan revocation
...
Local privilege escalation due to insecure Unix socket permissions
...
Sensitive information disclosure due to improper authorization checks
...
Sensitive information disclosure due to improper configuration of a headless browser
...
Unauthorized resource manipulation due to improper authorization checks
...
Local privilege escalation due to DLL hijacking vulnerability
...
Denial of service due to insufficient input validation in authentication logging
...
Unnecessary transmission of sensitive cryptographic material
...
Information disclosure and manipulation due to improper authorization checks
...
Unauthorized report deletion due to insufficient access control
...
Unauthorized modification of settings due to insufficient authorization checks
...
Unauthorized resource manipulation due to improper authorization checks
...
Sensitive information disclosure and manipulation due to improper authentication
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to improper soft link handling
...
Default credentials set for local privileged user in Virtual Appliance
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to insufficient authorization checks
...
Local privilege escalation due to improper directory permissions
...
Unauthorized data access due to insufficient access control validation
...
Sensitive information disclosure due to improper access control
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...