AG
Product
Agent
45
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 30Medium 15Low 0
Watch
Add Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28727 | 7.8 | Mar 5 | Local privilege escalation due to insecure Unix socket permissions Affected: before c25.10 |
| CVE-2023-44209 | 7.8 | Oct 4 | Local privilege escalation due to improper soft link handling Affected: c22.02 |
| CVE-2023-41744 | 7.8 | Aug 31 | Local privilege escalation due to unrestricted loading of unsigned libraries Affected: before c22.10 |
| CVE-2023-41743 | 7.8 | Aug 31 | Local privilege escalation due to insecure driver communication port permissions Affected: before c23.02 |
| CVE-2022-45451 | 7.8 | Aug 31 | Local privilege escalation due to insecure driver communication port permissions Affected: before c22.10 |
| CVE-2022-45452 | 7.8 | May 18 | Local privilege escalation due to insecure folder permissions Affected: before c21.09 |
| CVE-2022-45455 | 7.8 | Feb 13 | Local privilege escalation due to incomplete uninstallation cleanup Affected: before c22.07 |
| CVE-2022-24113 | 7.8 | Feb 4 | Local privilege escalation due to excessive permissions assigned to child processes Affected: before c21.06 |
| CVE-2021-44204 | 7.8 | Feb 4 | Local privilege escalation via named pipe due to improper access control checks Affected: before c21.06 |
| CVE-2023-41749 | 7.5 | Aug 31 | Sensitive information disclosure due to excessive collection of system information Affected: before c23.03 |
| CVE-2023-41742 | 7.5 | Aug 31 | Excessive attack surface due to binding to an unrestricted IP address Affected: before c22.09 |
| CVE-2022-45459 | 7.5 | May 18 | Sensitive information disclosure due to insecure registry permissions Affected: before c22.07 |
| CVE-2022-45458 | 7.5 | May 18 | Sensitive information disclosure and manipulation due to improper certification validation Affected: before c22.05 |
| CVE-2022-45457 | 7.5 | May 18 | Sensitive information disclosure and manipulation due to improper certification validation Affected: before c22.05 |
| CVE-2022-45450 | 7.5 | May 18 | Sensitive information disclosure and manipulation due to improper authorization Affected: before c21.12 |
| CVE-2022-45456 | 7.5 | Apr 26 | Denial of service due to unauthenticated API endpoint Affected: before c22.08 |
| CVE-2022-45454 | 7.5 | Feb 13 | Sensitive information disclosure due to insecure folder permissions Affected: before c22.08 |
| CVE-2022-30990 | 7.5 | May 18 | Sensitive information disclosure due to insecure folder permissions Affected: before c21.10 |
| CVE-2021-34800 | 7.5 | Nov 29 | Sensitive information could be logged Affected: through c21.06 |
| CVE-2020-14999 | 7.5 | Jul 30 | A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Windows memory protection and access sensitive data Affected: 12.5.21540 through 12.5.23094 |
| CVE-2025-11792 | 7.3 | Mar 5 | Local privilege escalation due to DLL hijacking vulnerability Affected: before c25.10 |
| CVE-2023-45248 | 7.3 | Oct 9 | Local privilege escalation due to DLL hijacking vulnerability Affected: before c23.10 |
| CVE-2026-28713 | 7.1 | Mar 5 | Default credentials set for local privileged user in Virtual Appliance Affected: before c23.12 |
| CVE-2025-11791 | 7.1 | Mar 5 | Sensitive information disclosure and manipulation due to insufficient authorization checks Affected: before c25.10 |
| CVE-2023-48676 | 7.1 | Dec 14 | Sensitive information disclosure and manipulation due to missing authorization Affected: before c23.12 |
| CVE-2023-45247 | 7.1 | Oct 9 | Sensitive information disclosure and manipulation due to missing authorization Affected: before c23.10 |
| CVE-2023-45246 | 7.1 | Oct 6 | Sensitive information disclosure and manipulation due to missing authorization Affected: before c23.09 |
| CVE-2023-45244 | 7.1 | Oct 6 | Sensitive information disclosure and manipulation due to missing authorization Affected: before c23.07 |
| CVE-2023-44212 | 7.1 | Oct 5 | Sensitive information disclosure and manipulation due to missing authorization Affected: before c23.01 |
| CVE-2023-44211 | 7.1 | Oct 5 | Sensitive information disclosure and manipulation due to missing authorization Affected: before c23.02 |
| CVE-2023-45245 | 5.5 | Oct 6 | Sensitive information disclosure due to missing authorization Affected: before c23.08 |
| CVE-2023-45243 | 5.5 | Oct 5 | Sensitive information disclosure due to missing authorization Affected: before c23.06 |
| CVE-2023-45242 | 5.5 | Oct 5 | Sensitive information disclosure due to missing authorization Affected: before c23.06 |
| CVE-2023-45241 | 5.5 | Oct 5 | Sensitive information leak through log files Affected: before c23.06 |
| CVE-2023-45240 | 5.5 | Oct 5 | Sensitive information disclosure due to missing authorization Affected: before c23.06 |
| CVE-2023-44214 | 5.5 | Oct 5 | Sensitive information disclosure due to missing authorization Affected: before c23.06 |
| CVE-2023-44213 | 5.5 | Oct 5 | Sensitive information disclosure due to excessive collection of system information Affected: before c23.06 |
| CVE-2023-44210 | 5.5 | Oct 4 | Sensitive information disclosure and manipulation due to missing authorization Affected: c22.03 |
| CVE-2023-4688 | 5.5 | Aug 31 | Sensitive information leak through log files Affected: before c23.05 |
| CVE-2023-41751 | 5.5 | Aug 31 | Sensitive information disclosure due to improper token expiration validation Affected: before c23.03 |
| CVE-2023-41750 | 5.5 | Aug 31 | Sensitive information disclosure due to missing authorization Affected: before c23.03 |
| CVE-2023-41745 | 5.5 | Aug 31 | Sensitive information disclosure due to excessive collection of system information Affected: through c22.11 |
| CVE-2021-44199 | 5.5 | Nov 29 | DLL hijacking could lead to denial of service Affected: All versions, or not specified |
| CVE-2025-30413 | 4.4 | Mar 5 | Credentials are not deleted from Acronis Agent after plan revocation Affected: before c25.07 |
| CVE-2025-11790 | 4.4 | Mar 5 | Credentials are not deleted from Acronis Agent after plan revocation Affected: before c25.10 |
Showing 45