Acronis vulnerabilities
We track 92 vulnerabilities in Acronis products across 34 products. 92 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on October 28, 2026.
Latest Acronis vulnerabilities
- 8.2 High severity
Acronis Cyber Protect Cloud Agent: Unquoted Search Path or Element
Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) befor
- 7.1 High severity
Acronis Cyber Protect Cloud Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 411
- 7.1 High severity
Acronis Cyber Protect Cloud Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 391
- 7.1 High severity
Acronis Cyber Protect Cloud Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36943.
- 7.8 High severity
Acronis Cyber Protect Home Office: Uncontrolled Search Path Element
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Window
- 7.3 High severity
Acronis Cyber Protect Cloud Agent: Uncontrolled Search Path Element
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
- 7.1 High severity
Acronis Cyber Protect Cloud Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 391
- 7.1 High severity
Acronis Cyber Protect Cloud Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 391
- 7.1 High severity
Acronis Cyber Protect Cloud Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 373
- 7.1 High severity
Acronis Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 31477.
- 7.1 High severity
Acronis Cyber Protect Cloud Agent: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 31637, Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
- 7.8 High severity
Acronis Cyber Protect Cloud Agent: Externally Controlled Reference to a Resource in Another Sphere
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 29051, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
- 9.1 Critical severity
Acronis Cyber Protect Home Office: Missing Authorization
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.
- 9.1 Critical severity
Acronis Cyber Protect 15: Authorization Bypass Through User-Controlled Key
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
- 7.5 High severity
Acronis Cyber Protect 15: Cleartext Storage of Sensitive Information
Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
- 7.5 High severity
Acronis Cyber Protect 15: Insufficiently Protected Credentials
Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
- 7.8 High severity
Acronis Cyber Protect 15: Incorrect Default Permissions
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979.
- 7.5 High severity
Acronis Cyber Protect 15: Exposure of Private Personal Information to an Unauthorized Actor
Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
- 8.1 High severity
Acronis Cyber Protect 15: Authorization Bypass Through User-Controlled Key
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
- 7.5 High severity
Acronis Cyber Protect 15: Cleartext Storage of Sensitive Information
Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
- 9.1 Critical severity
Acronis Cyber Protect 15: Improper Authentication
Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
- 7.5 High severity
Acronis Cyber Protect Home Office: Incorrect Default Permissions
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.
- 7.5 High severity
Acronis Agent: Exposure of Sensitive Information to an Unauthorized Actor
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
- 7.8 High severity
Acronis Cyber Protect Home Office: Improper Link Resolution Before File Access
Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis True Image OEM (Windows) before build 42575.
- 9.8 Critical severity
Remote command execution due to improper input validation.
Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
- 9.8 Critical severity
Remote command execution due to improper input validation.
Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
- 7.8 High severity
Acronis Agent: Improper Verification of Cryptographic Signature
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.
- 7.8 High severity
Acronis Cyber Protect Home Office: Improper Privilege Management
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber
- 7.5 High severity
Acronis Agent: Exposure of Resource to Wrong Sphere
Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
- 7.8 High severity
Acronis Cyber Protect Home Office: Externally Controlled Reference to a Resource in Another Sphere
Local privilege escalation during recovery due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173.
- 7.8 High severity
Acronis Cyber Protect Home Office: Improper Privilege Management
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows
- 7.8 High severity
Acronis Cyber Protect Home Office: Improper Verification of Cryptographic Signature
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40208.
- 7.5 High severity
Acronis Agent: Incorrect Default Permissions
Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
- 7.5 High severity
Acronis Agent: Improper Certificate Validation
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
- 7.5 High severity
Acronis Agent: Improper Certificate Validation
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
- 7.8 High severity
Acronis Agent: Incorrect Default Permissions
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.
- 7.5 High severity
Acronis Agent: Files or Directories Accessible to External Parties
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
- 8.8 High severity
Acronis Cyber Protect 15: Improper Privilege Management
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before buil
- 7.5 High severity
Acronis Cyber Protect 15: Improper Authentication
Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.
- 7.5 High severity
Acronis Cyber Infrastructure: Permissive Cross-domain Security Policy with Untrusted Domains
Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135.