AC
Product
Acronis Cyber Protect 17
32
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 1High 9Medium 20Low 2
Watch
Add Acronis Cyber Protect 17 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28710 | 9.8 | Mar 5 | Sensitive information disclosure and manipulation due to improper authentication Affected: before 41186 |
| CVE-2026-28727 | 7.8 | Mar 5 | Local privilege escalation due to insecure Unix socket permissions Affected: before 41186 |
| CVE-2026-28718 | 7.5 | Mar 5 | Denial of service due to insufficient input validation in authentication logging Affected: before 41186 |
| CVE-2026-87102 New | 7.4 | Oct 28 | Sensitive information disclosure and manipulation due to improper token validation Affected: before 42587 |
| CVE-2026-87103 New | 7.4 | Oct 28 | Sensitive information disclosure and manipulation due to improper token validation Affected: before 42587 |
| CVE-2026-28722 | 7.3 | Mar 5 | Local privilege escalation due to improper soft link handling Affected: before 41186 |
| CVE-2026-28721 | 7.3 | Mar 5 | Local privilege escalation due to improper soft link handling Affected: before 41186 |
| CVE-2025-30414 New | 7.1 | Oct 28 | Local privilege escalation due to improper authentication Affected: before 42587 |
| CVE-2026-28713 | 7.1 | Mar 5 | Default credentials set for local privileged user in Virtual Appliance Affected: before 41186 |
| CVE-2025-11791 | 7.1 | Mar 5 | Sensitive information disclosure and manipulation due to insufficient authorization checks Affected: before 41186 |
| CVE-2026-87880 New | 6.8 | Oct 28 | Sensitive information disclosure due to missing SSL certificate verification affecting one component Affected: before 42587 |
| CVE-2026-28715 | 6.5 | Mar 5 | Sensitive information disclosure due to improper authorization checks Affected: before 41186 |
| CVE-2026-87878 New | 6.3 | Oct 28 | Linux binaries have executable stack attribute enabled Affected: before 42587 |
| CVE-2026-28712 | 6.3 | Mar 5 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 41186 |
| CVE-2026-28711 | 6.3 | Mar 5 | Local privilege escalation due to DLL hijacking vulnerability Affected: before 41186 |
| CVE-2026-87101 New | 6.2 | Oct 28 | Sensitive information disclosure due to improper token validation Affected: before 42587 |
| CVE-2026-87879 New | 5.9 | Oct 28 | Sensitive information disclosure due to improper token validation Affected: before 42587 |
| CVE-2026-87099 New | 5.7 | Oct 28 | Cross-site scripting (XSS) vulnerability due to improper input validation Affected: before 42587 |
| CVE-2026-28725 | 5.5 | Mar 5 | Sensitive information disclosure due to improper configuration of a headless browser Affected: before 41186 |
| CVE-2026-87097 New | 5.3 | Oct 28 | Sensitive information disclosure due to insufficiently protected credentials Affected: before 42587 |
| CVE-2026-28717 | 5.0 | Mar 5 | Local privilege escalation due to improper directory permissions Affected: before 41186 |
| CVE-2026-28714 | 4.8 | Mar 5 | Unnecessary transmission of sensitive cryptographic material Affected: before 41186 |
| CVE-2025-30413 | 4.4 | Mar 5 | Credentials are not deleted from Acronis Agent after plan revocation Affected: before 41186 |
| CVE-2026-28716 | 4.4 | Mar 5 | Information disclosure and manipulation due to improper authorization checks Affected: before 41186 |
| CVE-2026-28726 | 4.3 | Mar 5 | Sensitive information disclosure due to improper access control Affected: before 41186 |
| CVE-2026-28724 | 4.3 | Mar 5 | Unauthorized data access due to insufficient access control validation Affected: before 41186 |
| CVE-2026-28723 | 4.3 | Mar 5 | Unauthorized report deletion due to insufficient access control Affected: before 41186 |
| CVE-2026-28720 | 4.3 | Mar 5 | Unauthorized modification of settings due to insufficient authorization checks Affected: before 41186 |
| CVE-2026-28719 | 4.3 | Mar 5 | Unauthorized resource manipulation due to improper authorization checks Affected: before 41186 |
| CVE-2026-28709 | 4.3 | Mar 5 | Unauthorized resource manipulation due to improper authorization checks Affected: before 41186 |
| CVE-2026-87100 New | 3.6 | Oct 28 | Protection mechanism failure due to missing binary hardening in Linux executables Affected: before 42587 |
| CVE-2026-87098 New | 3.1 | Oct 28 | Sensitive information disclosure due to improper authorization Affected: before 42587 |
Showing 32