Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how acronis compares to other vendors in security performance

View Risk Score →

Software

acronis cyber protect
86
acronis agent
46
acronis cyber protect cloud agent
25
acronis true image
24
acronis cyber protect 16
21
acronis cyber protect 17
21
acronis cyber protect home office
16
acronis snap deploy
10
acronis backup
8
acronis cyber protect home office windows
6
acronis acronis true image (windows)
5
acronis cloud manager
5
acronis cyber files
5
acronis cyber protect 15
5
acronis devicelock dlp
5
acronis acronis true image (macos)
4
acronis acronis true image oem (macos)
4
acronis true image windows
4
acronis cyber infrastructure
3
acronis acronis true image
2
acronis acronis true image oem
2
acronis acronis true image oem (windows)
2
acronis cyber protect 17 (windows)
2
acronis cyber protect cloud agent (windows)
2
acronis devicelock dlp (windows)
2
acronis acronis backup cpanel
1
acronis acronis backup directadmin
1
acronis acronis backup plesk
1
acronis acronis cyber protect 16 (windows)
1
acronis acronis cyber protect 17
1
acronis acronis cyber protect cloud agent
1
acronis acronis cyber protect cloud agent (windows)
1
acronis acronis true image for sandisk
1
acronis acronis true image for sandisk (macos)
1
acronis acronis true image for western digital
1
acronis acronis true image for western digital (macos)
1
acronis backup extension for plesk (linux)
1
acronis backup plugin for cpanel & whm (linux)
1
acronis backup plugin for directadmin
1
acronis backup plugin for directadmin (linux)
1
acronis cyber infrastructure (aci)
1
acronis cyber protect 16 (linux)
1
acronis cyber protect cloud
1
acronis cyber protect cloud agent (linux)
1
acronis true image echo server
1
acronis true image macos
1
acronis vss doctor
1

Acronis BackupAcronis Backup Incorrect Default Permissions Vulnerability

Risk 83
Severity
7.8
Exploited
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

1 / 2
Source: CISA
First published (updated )
CVE-2026-87886

Acronis DeviceLock DLPLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: …

Risk 64
Severity
7.3
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

First published (updated )
CVE-2026-44682

Acronis DeviceLock DLPLocal privilege escalation due to excessive permissions assigned to child processes. The following p…

Risk 64
Severity
7.3
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

First published (updated )
CVE-2026-42061

Acronis DeviceLock DLPLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: …

Risk 64
Severity
7.3
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

First published (updated )
CVE-2026-50033

Acronis DeviceLock DLP (Windows)Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: …

Risk 64
Severity
7.3
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

First published (updated )
CVE-2026-44609

Acronis DeviceLock DLP (Windows)Input Validation

Risk 69
Severity
7.8
Input Validation
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

First published (updated )
CVE-2026-41220

Acronis DeviceLock DLPInput Validation

Risk 69
Severity
7.8
Input Validation
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

First published (updated )
CVE-2026-41952

Acronis DeviceLock DLPLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: …

Risk 59
Severity
6.7
AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.

First published (updated )
CVE-2026-25852

Acronis Acronis True Image OEM (macOS)Local privilege escalation due to improper handling of environment variables. The following products…

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.

First published (updated )
CVE-2026-33092

Acronis Acronis True Image (Windows)Local privilege escalation due to insecure folder permissions. The following products are affected: …

Risk 59
Severity
6.7
AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.

First published (updated )
CVE-2026-33271

Acronis Acronis True Image (Windows)Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: …

Risk 59
Severity
6.7
AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.

First published (updated )
CVE-2026-27774

Acronis Acronis True Image (Windows)Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: …

Risk 59
Severity
6.7
AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.

First published (updated )
CVE-2026-28728

Acronis Cyber Protect 17Sensitive information disclosure due to improper access control. The following products are affected…

Risk 16
Severity
4.3
EPSS
0.03%
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28726

Acronis Cyber Protect 17Sensitive information disclosure due to improper configuration of a headless browser. The following …

Risk 24
Severity
5.5
EPSS
0.01%
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28725

Acronis Acronis Cyber Protect Cloud AgentCredentials are not deleted from Acronis Agent after plan revocation. The following products are aff…

Risk 26
Severity
4.4
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.

First published (updated )
CVE-2025-30413

Acronis Cyber Protect 17Unauthorized data access due to insufficient access control validation. The following products are a…

Risk 16
Severity
4.3
EPSS
0.03%
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28724

Acronis Cyber Protect 17Unauthorized report deletion due to insufficient access control. The following products are affected…

Risk 16
Severity
4.3
EPSS
0.03%
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28723

Acronis Cyber Protect 17Local privilege escalation due to improper soft link handling. The following products are affected: …

Risk 48
Severity
7.3
EPSS
0.01%
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

First published (updated )
CVE-2026-28722

Acronis Cyber Protect 17 (Windows)Local privilege escalation due to improper soft link handling. The following products are affected: …

Risk 48
Severity
7.3
EPSS
0.01%
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

First published (updated )
CVE-2026-28721

Acronis Cyber Protect 17Unauthorized modification of settings due to insufficient authorization checks. The following produc…

Risk 16
Severity
4.3
EPSS
0.03%
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28720

Acronis Cyber Protect 17Unauthorized resource manipulation due to improper authorization checks. The following products are …

Risk 16
Severity
4.3
EPSS
0.03%
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28719

Acronis Cyber Protect 17Input Validation

Risk 31
Severity
7.5
EPSS
0.09%
Input Validation
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28718

Acronis Cyber Protect 17Local privilege escalation due to improper directory permissions. The following products are affecte…

Risk 22
Severity
5
EPSS
0.01%
AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

First published (updated )
CVE-2026-28717

Acronis Cyber Protect 17Information disclosure and manipulation due to improper authorization checks. The following products…

Risk 21
Severity
4.4
EPSS
0.01%
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28716

Acronis Cyber Protect 17Sensitive information disclosure due to improper authorization checks. The following products are af…

Risk 27
Severity
6.5
EPSS
0.03%
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28715

Acronis Cyber Protect 17Unnecessary transmission of sensitive cryptographic material. The following products are affected: A…

Risk 22
Severity
4.8
EPSS
0.02%
AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28714

Acronis Cyber Protect Cloud AgentDefault credentials set for local privileged user in Virtual Appliance. The following products are a…

Risk 44
Severity
7.1
EPSS
0.04%
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

First published (updated )
CVE-2026-28713

Acronis Cyber Protect 17Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: …

Risk 35
Severity
6.3
EPSS
0.01%
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

First published (updated )
CVE-2026-28712

Acronis Cyber Protect 17Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: …

Risk 35
Severity
6.3
EPSS
0.01%
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

First published (updated )
CVE-2026-28711

Acronis Cyber Protect 17Sensitive information disclosure and manipulation due to improper authentication. The following prod…

Risk 61
Severity
9.8
EPSS
0.09%
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

First published (updated )
CVE-2026-28710

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203