Acronis Cyber Protect

Name: Acronis Cyber Protect
Brand: Acronis

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical6high7medium0low

updated 2026-10-27

vulnerabilities (58)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-30411US	—	0.77% (55th)	—	16 update 4	2026-02-20	< 16 update 4
CVE-2025-30412US	—	0.69% (53rd)	—	16 update 4	2026-02-20	< 16 update 4
CVE-2025-30410US	—OT elevated	0.69% (53rd)	—	16 update 4	2026-02-20	< 16 update 4
CVE-2020-10138US	high7.8	0.53% (45th)	—	24600	2020-10-21	15 → 24600
CVE-2025-30416US	—OT elevated	0.45% (39th)	—	16 update 4	2026-02-20	< 16 update 4
CVE-2026-28710US	critical9.8	0.43% (37th)	—	no fix	2026-03-06	3 versions
CVE-2025-30415US	—	0.37% (31st)	—	no fix	2025-06-04	≤ Cloud Agent <C25.05
CVE-2026-28718US	high7.5	0.36% (30th)	—	no fix	2026-03-06	3 versions
CVE-2026-28715US	medium6.5OT elevated	0.30% (22nd)	—	no fix	2026-03-06	3 versions
CVE-2024-55541US	medium6.1	0.29% (22nd)	—	no fix	2025-01-02	≤ 16 <Update 3
CVE-2024-49388US	critical9.1	0.27% (18th)	—	no fix	2024-10-15	≤ 16 <build 38690
CVE-2025-48962US	—	0.23% (14th)	—	16 update 4	2025-06-04	< 16 update 4
CVE-2024-56413US	—	0.23% (14th)	—	no fix	2025-01-02	≤ 16 <Update 3
CVE-2024-49384US	medium4.3	0.22% (12th)	—	no fix	2024-10-15	≤ 16 <build 38690
CVE-2024-49383US	medium4.3	0.22% (12th)	—	no fix	2024-10-15	≤ 16 <build 38690
CVE-2024-49382US	medium4.3	0.22% (12th)	—	no fix	2024-10-15	≤ 16 <build 38690
CVE-2025-30409US	—	0.21% (10th)	—	no fix	2025-04-24	≤ Cloud Agent <C25.04
CVE-2025-24831US	—	0.19% (8th)	—	no fix	2025-01-31	≤ Cloud Agent <C25.01
CVE-2026-28713US	—OT elevated	0.18% (7th)	—	no fix	2026-03-06	3 versions
CVE-2026-28726US	—OT elevated	0.17% (7th)	—	no fix	2026-03-06	3 versions
CVE-2026-28724US	—OT elevated	0.17% (7th)	—	no fix	2026-03-06	3 versions
CVE-2025-30408US	—	0.17% (7th)	—	no fix	2025-04-24	≤ Cloud Agent <C25.04
CVE-2024-49387US	high7.5OT elevated	0.17% (6th)	—	no fix	2024-10-15	≤ 16 <build 38690
CVE-2024-55542US	—	0.17% (6th)	—	no fix	2025-01-02	≤ 16 <Update 3
CVE-2024-55543US	high7.8	0.17% (6th)	—	no fix	2025-01-02	≤ 16 <Update 3
CVE-2026-28714US	—	0.17% (6th)	—	no fix	2026-03-06	3 versions
CVE-2024-55540US	high7.8	0.16% (6th)	—	no fix	2025-01-02	≤ 16 <Update 3
CVE-2025-30413US	medium4.4	0.16% (5th)	—	no fix	2026-03-06	≤ Cloud Agent <C25.07
CVE-2026-28709US	medium4.3OT elevated	0.16% (5th)	—	no fix	2026-03-06	3 versions
CVE-2026-28723US	—OT elevated	0.16% (5th)	—	no fix	2026-03-06	3 versions
CVE-2026-28720US	—OT elevated	0.16% (5th)	—	no fix	2026-03-06	3 versions
CVE-2026-28719US	—OT elevated	0.16% (5th)	—	no fix	2026-03-06	3 versions
CVE-2026-28722US	—	0.15% (4th)	—	no fix	2026-03-06	3 versions
CVE-2026-28721US	—	0.15% (4th)	—	no fix	2026-03-06	3 versions
CVE-2025-48963US	—	0.14% (4th)	—	no fix	2025-08-28	≤ Cloud Agent <C25.06
CVE-2025-48961US	—	0.14% (3rd)	—	16 update 4	2025-06-04	< 16 update 4
CVE-2025-30407US	—	0.14% (3rd)	—	no fix	2025-03-26	≤ Cloud Agent <build 39713
CVE-2025-24830US	—	0.14% (3rd)	—	no fix	2025-01-31	≤ Cloud Agent <C25.01
CVE-2025-24829US	—	0.14% (3rd)	—	no fix	2025-01-31	≤ Cloud Agent <C25.01
CVE-2025-24828US	—	0.14% (3rd)	—	no fix	2025-01-31	≤ Cloud Agent <C25.01
CVE-2025-24827US	—	0.14% (3rd)	—	no fix	2025-01-31	≤ Cloud Agent <C25.01
CVE-2025-9578US	—	0.13% (2nd)	—	40734	2025-08-28	< 40734
CVE-2025-48959US	—OT elevated	0.13% (2nd)	—	no fix	2025-06-04	≤ Cloud Agent <C25.05
CVE-2026-28717US	—OT elevated	0.12% (2nd)	—	no fix	2026-03-06	3 versions
CVE-2025-11790US	—	0.12% (2nd)	—	no fix	2026-03-06	3 versions
CVE-2026-28725US	—	0.12% (2nd)	—	no fix	2026-03-06	3 versions
CVE-2024-55539US	—OT elevated	0.11% (1st)	—	no fix	2024-12-23	≤ Cloud Agent (Linux) <39185
CVE-2025-11792US	—	0.11% (1st)	—	no fix	2026-03-06	3 versions
CVE-2024-56414US	—	0.11% (1st)	—	no fix	2025-01-02	≤ 16 <Update 3
CVE-2026-41952US	—	0.11% (1st)	—	no fix	2026-04-29	≤ Cloud Agent <26.03

showing 50 of 58

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization8 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource6 CVEs
CWE-426Untrusted Search Path5 CVEs
CWE-427Uncontrolled Search Path Element5 CVEs
CWE-1327Binding to an Unrestricted IP Address3 CVEs
CWE-1390Weak Authentication3 CVEs
CWE-276Incorrect Default Permissions3 CVEs
CWE-610Externally Controlled Reference to a Resource in Another Sphere3 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)57 CVEs
EUEU Vulnerability Database (ENISA)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan