Acronis Cyber Protect Cloud Agent vulnerabilities

23 known vulnerabilities in Acronis Cyber Protect Cloud Agent from Acronis. 23 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Weak Authentication

  CVE-2025-30414Oct 28, 2026Acronis

  Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.

• 7.8 High severity

  Acronis DeviceLock DLP: Write-what-where Condition

  CVE-2026-41952Apr 29, 2026Acronis

  Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

• 7.8 High severity

  Acronis DeviceLock DLP: Out-of-bounds Write

  CVE-2026-41220Apr 29, 2026Acronis

  Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

• 7.8 High severity

  Acronis Cyber Protect 17: Incorrect Default Permissions

  CVE-2026-28727Mar 6, 2026Acronis

  Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Use of Default Credentials

  CVE-2026-28713Mar 6, 2026Acronis

  Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

• 7.3 High severity

  Acronis Cyber Protect Cloud Agent: Uncontrolled Search Path Element

  CVE-2025-11792Mar 6, 2026Acronis

  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124.

• 7.1 High severity

  Acronis Cyber Protect 17: Missing Authorization

  CVE-2025-11791Mar 6, 2026Acronis

  Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) befo

• 9.8 Critical severity

  Acronis Cyber Protect Cloud Agent: Missing Authentication for Critical Functionality

  CVE-2025-30410Feb 20, 2026Acronis

  Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Ac

• 7.8 High severity

  Acronis Cyber Protect Cloud Agent: Incorrect Permission Assignment for Critical Resource

  CVE-2025-9578Aug 28, 2025Acronis

  Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40734.

• 7.3 High severity

  Acronis Cyber Protect Cloud Agent: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2025-48963Aug 28, 2025Acronis

  Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40296.

• 7.5 High severity

  Acronis Cyber Protect Cloud Agent: Improper Validation of Syntactic Correctness of Input

  CVE-2025-30415Jun 4, 2025Acronis

  Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.

• 8.2 High severity

  Acronis Cyber Protect Cloud Agent: Unquoted Search Path or Element

  CVE-2024-34010Apr 29, 2024Acronis

  Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) befor

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Missing Authorization

  CVE-2023-48684Apr 29, 2024Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 411

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Missing Authorization

  CVE-2023-48683Apr 29, 2024Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 391

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Missing Authorization

  CVE-2023-48676Dec 14, 2023Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36943.

• 7.8 High severity

  Acronis Cyber Protect Home Office: Uncontrolled Search Path Element

  CVE-2023-48677Dec 12, 2023Acronis

  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Window

• 7.3 High severity

  Acronis Cyber Protect Cloud Agent: Uncontrolled Search Path Element

  CVE-2023-45248Oct 9, 2023Acronis

  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Missing Authorization

  CVE-2023-45247Oct 9, 2023Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 391

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Missing Authorization

  CVE-2023-45246Oct 6, 2023Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 391

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Missing Authorization

  CVE-2023-45244Oct 6, 2023Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 373

• 7.1 High severity

  Acronis Cyber Protect Cloud Agent: Missing Authorization

  CVE-2023-44211Oct 5, 2023Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 31637, Acronis Cyber Protect 16 (Linux, Windows) before build 37391.

• 7.8 High severity

  Acronis Cyber Protect Cloud Agent: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2023-44209Oct 4, 2023Acronis

  Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 29051, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.

• 7.8 High severity

  Acronis Cyber Protect Home Office: Improper Privilege Management

  CVE-2023-41743Aug 31, 2023Acronis

  Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber