Log in Start free

Acronis

Products

ProductCVEsExploitedLatest
Acronis Cyber Infrastructure51Oct 21, 2026
Acronis Backup plugin for cPanel & WHM51Sep 17, 2026
Acronis Backup extension for Plesk41Sep 17, 2026
Acronis Backup plugin for DirectAdmin31Sep 17, 2026
Acronis Cyber Protect 1547–Feb 20, 2026
Acronis Cyber Protect Cloud Agent45–Oct 28, 2026
Acronis Cyber Protect 1739–Oct 28, 2026
Acronis Cyber Protect 1636–Feb 20, 2026
Acronis Agent25–Oct 6, 2023
Acronis Cyber Protect Home Office22–Dec 12, 2023
Acronis True Image OEM12–Apr 10, 2026
Acronis True Image11–Apr 10, 2026
Acronis Snap Deploy8–Jan 28, 2025
Acronis DeviceLock DLP7–Jun 3, 2026
Acronis True Image 20216–Feb 4, 2022
Acronis Cyber Files5–Oct 17, 2024
Acronis Cloud Manager5–Jan 27, 2026
Acronis True Image for SanDisk2–Sep 30, 2025
Acronis Cyber Backup 12.52–May 3, 2023
Acronis True Image for Western Digital2–Sep 30, 2025
Acronis VSS Doctor1–Feb 11, 2022
Cyber Backup1–Oct 21, 2020
Cyber Protect1–Oct 21, 2020
True Image1–Oct 21, 2020
True Image 20211–Oct 21, 2020

Exploited and recent CVEs

  • CVE-2026-87886 High 7.8 Exploited Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for P 0.2%
  • CVE-2026-87886 High 7.8 Exploited Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for P 0.2%
  • CVE-2026-87886 High 7.8 Exploited Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for P 0.2%
  • CVE-2023-45249 Critical 9.8 Exploited Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 53.5%
  • CVE-2026-87879 Medium 5.9 Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. 0.2%
  • CVE-2026-87878 Medium 6.3 Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587. 0.1%
  • CVE-2026-87102 High 7.4 Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. 0.2%
  • CVE-2026-87100 Low 3.6 Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587. <0.1%
  • CVE-2026-87099 Medium 5.7 Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. 0.2%
  • CVE-2025-30414 High 7.1 Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) befor 0.2%
  • CVE-2025-30414 High 7.1 Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) befor 0.2%
  • CVE-2026-87098 Low 3.1 Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. 0.2%
  • CVE-2026-87880 Medium 6.8 Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. 0.1%
  • CVE-2026-87103 High 7.4 Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. 0.2%
  • CVE-2026-87101 Medium 6.2 Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. <0.1%
  • CVE-2026-87097 Medium 5.3 Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. 0.2%
  • CVE-2026-87096 Low 3.3 Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber In 0.1%
  • CVE-2026-87095 Critical 9.1 Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber In 0.2%
  • CVE-2026-44682 High 7.3 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. 0.1%
  • CVE-2026-42061 High 7.3 Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. 0.1%
  • CVE-2026-50033 High 7.3 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. 0.1%
  • CVE-2026-44609 High 7.3 Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227. 0.1%
  • CVE-2026-41220 High 7.8 Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) b 0.1%
  • CVE-2026-41220 High 7.8 Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) b 0.1%
  • CVE-2026-41952 High 7.8 Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) b 0.1%
  • CVE-2026-41952 High 7.8 Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) b 0.1%
  • CVE-2026-25852 Medium 6.7 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212. <0.1%
  • CVE-2026-33092 High 7.8 Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before 0.2%
  • CVE-2026-33092 High 7.8 Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before 0.2%
  • CVE-2026-33271 Medium 6.7 Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902. <0.1%