Skip to content
Noroxi

Acronis records

181 published records for vendor acronis.

Researcher profile

Entered KEV
2 · 1.1%
Weaponized
5 · 2.8%
Pre-auth RCE
3
With a fix record
71.3%
Median publish → KEV
2 days

Records by year

  1. 17
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

181 records
  • CVE-2023-45249
    85Now

    Remote command execution due to use of default passwords.

    CriticalCVSS 9.8KEVWeaponizedEPSS 53%

    acronis · cyber infrastructureJul 24, 2024

  • CVE-2026-87886
    61This week

    Local privilege escalation due to insecure file permissions.

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    acronis · acronis backupSep 17, 2026

  • CVE-2022-30995
    60This week

    Sensitive information disclosure due to improper authentication.

    HighCVSS 7.5WeaponizedEPSS 3%

    acronis · cyber backupMay 3, 2023

  • CVE-2022-3405
    40Plan

    Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.

    HighCVSS 8.8WeaponizedEPSS 5%

    acronis · cyber backupMay 3, 2023

  • CVE-2020-25736
    40Plan

    Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configurati

    HighCVSS 7.8WeaponizedEPSS 2%

    acronis · true imageJul 15, 2021

  • CVE-2025-30411
    40Plan

    Sensitive data disclosure and manipulation due to improper authentication.

    CriticalCVSS 10.0No exploitEPSS 0%

    acronis · cyber protectFeb 19, 2026

  • CVE-2025-30412
    40Plan

    Sensitive data disclosure and manipulation due to improper authentication.

    CriticalCVSS 10.0No exploitEPSS 0%

    acronis · cyber protectFeb 19, 2026

  • CVE-2025-30416
    40Plan

    Sensitive data disclosure and manipulation due to missing authorization.

    CriticalCVSS 10.0No exploitEPSS 0%

    acronis · cyber protectFeb 19, 2026

  • CVE-2023-41746
    39Monitor

    Remote command execution due to improper input validation.

    CriticalCVSS 9.8No exploitEPSS 1%

    acronis · cloud managerAug 31, 2023

  • CVE-2023-41748
    39Monitor

    Remote command execution due to improper input validation.

    CriticalCVSS 9.8No exploitEPSS 1%

    acronis · cloud managerAug 31, 2023

  • CVE-2024-8767
    39Monitor

    Sensitive data disclosure and manipulation due to unnecessary privileges assignment.

    CriticalCVSS 9.9No exploitEPSS 0%

    acronis · acronis backup plugin for cpanel & whmSep 17, 2024

  • CVE-2026-28710
    39Monitor

    Sensitive information disclosure and manipulation due to improper authentication.

    CriticalCVSS 9.8No exploitEPSS 0%

    acronis · cyber protectMar 5, 2026

  • CVE-2023-44206
    36Monitor

    Sensitive information disclosure and manipulation due to improper authorization.

    CriticalCVSS 9.1No exploitEPSS 1%

    acronis · cyber protectSep 27, 2023

  • CVE-2023-44152
    36Monitor

    Sensitive information disclosure and manipulation due to improper authentication.

    CriticalCVSS 9.1No exploitEPSS 0%

    acronis · cyber protectSep 27, 2023

  • CVE-2023-44208
    36Monitor

    Sensitive information disclosure and manipulation due to missing authorization.

    CriticalCVSS 9.1No exploitEPSS 0%

    acronis · cyber protect home officeOct 4, 2023

  • CVE-2024-49388
    36Monitor

    Sensitive information manipulation due to improper authorization.

    CriticalCVSS 9.1No exploitEPSS 0%

    acronis · cyber protectOct 15, 2024

  • CVE-2017-3219
    35Monitor

    Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP.

    HighCVSS 8.8No exploitEPSS 0%

    acronis · true imageJun 21, 2017

  • CVE-2023-44154
    32Monitor

    Sensitive information disclosure and manipulation due to improper authorization.

    HighCVSS 8.1No exploitEPSS 0%

    acronis · cyber protectSep 27, 2023

  • CVE-2021-32581
    32Monitor

    Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653

    HighCVSS 8.1No exploitEPSS 0%

    acronis · cyber protect cloudAug 5, 2021

  • CVE-2024-34010
    32Monitor

    Local privilege escalation due to unquoted search path vulnerability.

    HighCVSS 8.2No exploitEPSS 0%

    acronis · acronis cyber protect cloud agentApr 29, 2024

  • CVE-2024-34013
    31Monitor

    Local privilege escalation due to OS command injection vulnerability.

    HighCVSS 7.8No exploitEPSS 0%

    acronis · acronis true imageJul 18, 2024

  • CVE-2020-35145
    31Monitor

    Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple co

    HighCVSS 7.8No exploitEPSS 0%

    acronis · true imageJan 29, 2021

  • CVE-2020-10138
    31Monitor

    Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C

    HighCVSS 7.8No exploitEPSS 0%

    acronis · cyber backupOct 21, 2020

  • CVE-2022-45451
    31Monitor

    Local privilege escalation due to insecure driver communication port permissions.

    HighCVSS 7.8Proof of conceptEPSS 0%

    acronis · agentAug 31, 2023

  • CVE-2020-9452
    31Monitor

    An issue was discovered in Acronis True Image 2020 24.5.22510.

    HighCVSS 7.8No exploitEPSS 0%

    acronis · true image 2020May 25, 2021