Acronis Cyber Infrastructure vulnerabilities

3 known vulnerabilities in Acronis Cyber Infrastructure from Acronis. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Acronis Cyber Infrastructure: Incorrect Authorization

  CVE-2026-87095Oct 21, 2026Acronis

  Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infr

• 9.8 Critical severity

  Acronis Cyber Infrastructure (ACI) Insecure Default Password Exploited

  CVE-2023-45249Jul 24, 2024AcronisEPSS 53.5%

  Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5

• 7.5 High severity

  Acronis Cyber Infrastructure: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2023-2360Apr 28, 2023Acronis

  Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135.