AC
Product
Acronis Cyber Protect Cloud Agent
31
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 13Medium 16Low 1
Watch
Add Acronis Cyber Protect Cloud Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30410 | 9.8 | Feb 20 | Sensitive data disclosure and manipulation due to missing authentication Affected: before 39870 |
| CVE-2024-34010 | 8.2 | Apr 29 | Local privilege escalation due to unquoted search path vulnerability Affected: before 37758 |
| CVE-2026-41220 | 7.8 | Apr 29 | Local privilege escalation due to improper input validation Affected: before 42183 |
| CVE-2026-41952 | 7.8 | Apr 29 | Local privilege escalation due to improper input validation Affected: before 42183 |
| CVE-2026-28727 | 7.8 | Mar 5 | Local privilege escalation due to insecure Unix socket permissions Affected: before 41124 |
| CVE-2025-9578 | 7.8 | Aug 28 | Local privilege escalation due to insecure folder permissions Affected: before 40734 |
| CVE-2025-30415 | 7.5 | Jun 4 | Denial of service due to improper handling of malformed input Affected: before 40077 |
| CVE-2025-11792 | 7.3 | Mar 5 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 41124 |
| CVE-2025-48963 | 7.3 | Aug 28 | Local privilege escalation due to improper soft link handling Affected: before 40296 |
| CVE-2025-30414 New | 7.1 | Oct 28 | Local privilege escalation due to improper authentication Affected: before 42569 |
| CVE-2026-28713 | 7.1 | Mar 5 | Default credentials set for local privileged user in Virtual Appliance Affected: before 36943 |
| CVE-2025-11791 | 7.1 | Mar 5 | Sensitive information disclosure and manipulation due to insufficient authorization checks Affected: before 41124 |
| CVE-2023-48684 | 7.1 | Apr 29 | Sensitive information disclosure and manipulation due to missing authorization Affected: before 37758 |
| CVE-2023-48683 | 7.1 | Apr 29 | Sensitive information disclosure and manipulation due to missing authorization Affected: before 37758 |
| CVE-2024-34011 | 6.8 | Apr 29 | Local privilege escalation due to insecure folder permissions Affected: before 37758 |
| CVE-2025-48959 | 6.7 | Jun 4 | Local privilege escalation due to insecure file permissions Affected: before 40077 |
| CVE-2025-30408 | 6.7 | Apr 24 | Local privilege escalation due to insecure folder permissions Affected: before 39904 |
| CVE-2024-8766 | 6.7 | Sep 16 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 38235 |
| CVE-2025-24831 | 6.6 | Jan 31 | Local privilege escalation due to unquoted search path vulnerability Affected: before 39378 |
| CVE-2024-34016 | 6.5 | Sep 16 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 38235 |
| CVE-2025-30407 | 6.3 | Mar 26 | Local privilege escalation due to a binary hijacking vulnerability Affected: before 39713 |
| CVE-2025-24828 | 6.3 | Jan 31 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39378 |
| CVE-2025-24827 | 6.3 | Jan 31 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39378 |
| CVE-2025-24829 | 6.3 | Jan 31 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39378 |
| CVE-2025-24830 | 6.3 | Jan 31 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 39378 |
| CVE-2025-30409 | 5.5 | Apr 24 | Denial of service due to allocation of resources without limits Affected: before 39904 |
| CVE-2024-8903 | 4.7 | Sep 23 | Local active protection service settings manipulation due to unnecessary privileges assignment Affected: before 38565 |
| CVE-2025-30413 | 4.4 | Mar 5 | Credentials are not deleted from Acronis Agent after plan revocation Affected: before 40497 |
| CVE-2025-11790 | 4.4 | Mar 5 | Credentials are not deleted from Acronis Agent after plan revocation Affected: before 41124 |
| CVE-2024-55542 | 4.4 | Jan 2 | Local privilege escalation due to excessive permissions assigned to Tray Monitor service Affected: before 35895 |
| CVE-2024-55539 | 2.5 | Dec 23 | Weak algorithm used to sign RPM package Affected: before 39185 |
Showing 31