Vulnerability-Lookup

WID-SEC-W-2026-0620

Vulnerability from csaf_certbund - Published: 2026-03-05 23:00 - Updated: 2026-03-05 23:00

Summary

Acronis Cyber Protect und Cyber Protect Cloud Agent: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Acronis Cyber Protect ist eine umfassende Cybersecurity- und Datenschutzlösung, die Funktionen wie Virenschutz, Backup und Wiederherstellung, Schutz vor Ransomware und sicheres Online-Browsing in einem einzigen Paket bietet.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Betroffene Betriebssysteme: - Linux - MacOS X - Sonstiges - Windows

CVE-2025-11790

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2025-11791

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2025-11792

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28709

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28710

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28711

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28712

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28713

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28714

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28715

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28716

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28717

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28718

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28719

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28720

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28721

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28722

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28723

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28724

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28725

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28726

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

CVE-2026-28727

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Acronis Cyber Protect 17 <build 41186 Acronis / Cyber Protect		17 <build 41186
Acronis Cyber Protect Cloud Agent <build 41124 Acronis / Cyber Protect		Cloud Agent <build 41124
Acronis Cyber Protect Cloud Agent <build 36943 Acronis / Cyber Protect		Cloud Agent <build 36943

References

27 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://security-advisory.acronis.com/advisories	external
https://security-advisory.acronis.com/SEC-2330	external
https://security-advisory.acronis.com/SEC-2332	external
https://security-advisory.acronis.com/SEC-3687	external
https://security-advisory.acronis.com/SEC-4168	external
https://security-advisory.acronis.com/SEC-5383	external
https://security-advisory.acronis.com/SEC-5889	external
https://security-advisory.acronis.com/SEC-5910	external
https://security-advisory.acronis.com/SEC-8363	external
https://security-advisory.acronis.com/SEC-8377	external
https://security-advisory.acronis.com/SEC-8378	external
https://security-advisory.acronis.com/SEC-8379	external
https://security-advisory.acronis.com/SEC-8401	external
https://security-advisory.acronis.com/SEC-8445	external
https://security-advisory.acronis.com/SEC-8481	external
https://security-advisory.acronis.com/SEC-8486	external
https://security-advisory.acronis.com/SEC-8493	external
https://security-advisory.acronis.com/SEC-8695	external
https://security-advisory.acronis.com/SEC-9137	external
https://security-advisory.acronis.com/SEC-9354	external
https://security-advisory.acronis.com/SEC-9386	external
https://security-advisory.acronis.com/SEC-9405	external
https://security-advisory.acronis.com/SEC-9408	external
https://security-advisory.acronis.com/SEC-9439	external
https://security-advisory.acronis.com/SEC-9646	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Acronis Cyber Protect ist eine umfassende Cybersecurity- und Datenschutzl\u00f6sung, die Funktionen wie Virenschutz, Backup und Wiederherstellung, Schutz vor Ransomware und sicheres Online-Browsing in einem einzigen Paket bietet.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht n\u00e4her spezifizierte Angriffe durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Sonstiges\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0620 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0620.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0620 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0620"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/advisories"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-2330"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-2332"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-3687"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-4168"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-5383"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-5889"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-5910"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8363"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8377"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8378"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8379"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8401"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8445"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8481"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8486"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8493"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-8695"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-9137"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-9354"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-9386"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-9405"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-9408"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-9439"
      },
      {
        "category": "external",
        "summary": "Acronis Security Advisory vom 2026-03-05",
        "url": "https://security-advisory.acronis.com/SEC-9646"
      }
    ],
    "source_lang": "en-US",
    "title": "Acronis Cyber Protect und Cyber Protect Cloud Agent: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-03-05T23:00:00.000+00:00",
      "generator": {
        "date": "2026-03-06T10:47:19.447+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0620",
      "initial_release_date": "2026-03-05T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-03-05T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "17 \u003cbuild 41186",
                "product": {
                  "name": "Acronis Cyber Protect 17 \u003cbuild 41186",
                  "product_id": "T051463"
                }
              },
              {
                "category": "product_version",
                "name": "17 build 41186",
                "product": {
                  "name": "Acronis Cyber Protect 17 build 41186",
                  "product_id": "T051463-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:acronis:cyber_protect:17__build_41186"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Cloud Agent \u003cbuild 36943",
                "product": {
                  "name": "Acronis Cyber Protect Cloud Agent \u003cbuild 36943",
                  "product_id": "T051464"
                }
              },
              {
                "category": "product_version",
                "name": "Cloud Agent build 36943",
                "product": {
                  "name": "Acronis Cyber Protect Cloud Agent build 36943",
                  "product_id": "T051464-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:acronis:cyber_protect:cloud_agent__build_36943"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Cloud Agent \u003cbuild 41124",
                "product": {
                  "name": "Acronis Cyber Protect Cloud Agent \u003cbuild 41124",
                  "product_id": "T051465"
                }
              },
              {
                "category": "product_version",
                "name": "Cloud Agent build 41124",
                "product": {
                  "name": "Acronis Cyber Protect Cloud Agent build 41124",
                  "product_id": "T051465-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:acronis:cyber_protect:cloud_agent__build_41124"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Cyber Protect"
          }
        ],
        "category": "vendor",
        "name": "Acronis"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-11790",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2025-11790"
    },
    {
      "cve": "CVE-2025-11791",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2025-11791"
    },
    {
      "cve": "CVE-2025-11792",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2025-11792"
    },
    {
      "cve": "CVE-2026-28709",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28709"
    },
    {
      "cve": "CVE-2026-28710",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28710"
    },
    {
      "cve": "CVE-2026-28711",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28711"
    },
    {
      "cve": "CVE-2026-28712",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28712"
    },
    {
      "cve": "CVE-2026-28713",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28713"
    },
    {
      "cve": "CVE-2026-28714",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28714"
    },
    {
      "cve": "CVE-2026-28715",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28715"
    },
    {
      "cve": "CVE-2026-28716",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28716"
    },
    {
      "cve": "CVE-2026-28717",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28717"
    },
    {
      "cve": "CVE-2026-28718",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28718"
    },
    {
      "cve": "CVE-2026-28719",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28719"
    },
    {
      "cve": "CVE-2026-28720",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28720"
    },
    {
      "cve": "CVE-2026-28721",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28721"
    },
    {
      "cve": "CVE-2026-28722",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28722"
    },
    {
      "cve": "CVE-2026-28723",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28723"
    },
    {
      "cve": "CVE-2026-28724",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28724"
    },
    {
      "cve": "CVE-2026-28725",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28725"
    },
    {
      "cve": "CVE-2026-28726",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28726"
    },
    {
      "cve": "CVE-2026-28727",
      "product_status": {
        "known_affected": [
          "T051463",
          "T051465",
          "T051464"
        ]
      },
      "release_date": "2026-03-05T23:00:00.000+00:00",
      "title": "CVE-2026-28727"
    }
  ]
}

CVE-2025-11790 (GCVE-0-2025-11790)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:47 – Updated: 2026-03-06 19:34

Summary

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.

Severity

4.4 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-732

Assigner

Acronis

References

2 references

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory
https://security-advisory.acronis.com/SEC-8658	related

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect Cloud Agent	Affected: unspecified , < 41124 (semver)

Credits

Airbus SecLab (mailto:vuln@airbus.com) Quentin Liddell (mailto:vuln@airbus.com) Mattéo Ricordeau (mailto:vuln@airbus.com) Benoît Camredon (mailto:vuln@airbus.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-11790",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T19:29:54.540014Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T19:34:40.843Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Windows"
          ],
          "product": "Acronis Cyber Protect Cloud Agent",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41124",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Airbus SecLab (mailto:vuln@airbus.com)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Quentin Liddell (mailto:vuln@airbus.com)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Matt\u00e9o Ricordeau (mailto:vuln@airbus.com)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Beno\u00eet Camredon (mailto:vuln@airbus.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "CWE-732",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:47:00.724Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-9386",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-9386"
        },
        {
          "name": "SEC-8658",
          "tags": [
            "related"
          ],
          "url": "https://security-advisory.acronis.com/SEC-8658"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2025-11790",
    "datePublished": "2026-03-05T23:47:00.724Z",
    "dateReserved": "2025-10-15T13:25:36.751Z",
    "dateUpdated": "2026-03-06T19:34:40.843Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-11791 (GCVE-0-2025-11791)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:46 – Updated: 2026-03-06 19:34

Summary

Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.

Severity

5.5 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-862

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)
Acronis	Acronis Cyber Protect Cloud Agent	Affected: unspecified , < 41124 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-11791",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T19:29:56.807824Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T19:34:47.346Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Windows"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Windows"
          ],
          "product": "Acronis Cyber Protect Cloud Agent",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41124",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:46:27.697Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-9405",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-9405"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2025-11791",
    "datePublished": "2026-03-05T23:46:27.697Z",
    "dateReserved": "2025-10-15T13:28:33.632Z",
    "dateUpdated": "2026-03-06T19:34:47.346Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-11792 (GCVE-0-2025-11792)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:45 – Updated: 2026-03-06 19:34

Summary

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124.

Severity

7.3 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-427

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect Cloud Agent	Affected: unspecified , < 41124 (semver)

Credits

@satz4797 (https://hackerone.com/satz4797)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-11792",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T19:31:24.491842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T19:34:53.411Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Acronis Cyber Protect Cloud Agent",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41124",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "@satz4797 (https://hackerone.com/satz4797)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:45:55.938Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-9439",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-9439"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2025-11792",
    "datePublished": "2026-03-05T23:45:55.938Z",
    "dateReserved": "2025-10-15T13:31:56.963Z",
    "dateUpdated": "2026-03-06T19:34:53.411Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28709 (GCVE-0-2026-28709)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:48 – Updated: 2026-03-06 19:34

Summary

Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

Severity

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-863

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)

Credits

@theelgo64 (https://hackerone.com/theelgo64)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28709",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T19:29:52.514872Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T19:34:34.657Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "@theelgo64 (https://hackerone.com/theelgo64)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:48:07.935Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-5889",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-5889"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2026-28709",
    "datePublished": "2026-03-05T23:48:07.935Z",
    "dateReserved": "2026-03-03T02:29:03.752Z",
    "dateUpdated": "2026-03-06T19:34:34.657Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28710 (GCVE-0-2026-28710)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:48 – Updated: 2026-03-07 04:55

Summary

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

Severity

8.1 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-1390

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28710",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-07T04:55:20.943Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1390",
              "description": "CWE-1390",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:48:48.088Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-9137",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-9137"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2026-28710",
    "datePublished": "2026-03-05T23:48:48.088Z",
    "dateReserved": "2026-03-03T02:29:03.752Z",
    "dateUpdated": "2026-03-07T04:55:20.943Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28711 (GCVE-0-2026-28711)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:50 – Updated: 2026-03-07 04:55

Summary

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

Severity

6.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-427

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)

Credits

@vanitas (https://hackerone.com/vanitas)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28711",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-07T04:55:19.021Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "@vanitas (https://hackerone.com/vanitas)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:50:16.116Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-2330",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-2330"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2026-28711",
    "datePublished": "2026-03-05T23:50:16.116Z",
    "dateReserved": "2026-03-03T02:29:03.753Z",
    "dateUpdated": "2026-03-07T04:55:19.021Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28712 (GCVE-0-2026-28712)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:50 – Updated: 2026-03-07 04:55

Summary

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

Severity

6.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-427

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)

Credits

@vanitas (https://hackerone.com/vanitas)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28712",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-07T04:55:17.528Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "@vanitas (https://hackerone.com/vanitas)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:50:38.746Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-2332",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-2332"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2026-28712",
    "datePublished": "2026-03-05T23:50:38.746Z",
    "dateReserved": "2026-03-03T02:29:03.753Z",
    "dateUpdated": "2026-03-07T04:55:17.528Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28713 (GCVE-0-2026-28713)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:51 – Updated: 2026-03-07 04:55

Summary

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

Severity

7.1 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

CWE

CWE-1392

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Acronis	Acronis Cyber Protect Cloud Agent	Affected: unspecified , < 36943 (semver)
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28713",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-07T04:55:22.751Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "VMware"
          ],
          "product": "Acronis Cyber Protect Cloud Agent",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "36943",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "VMware"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1392",
              "description": "CWE-1392",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:51:30.830Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-4168",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-4168"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2026-28713",
    "datePublished": "2026-03-05T23:51:30.830Z",
    "dateReserved": "2026-03-03T02:29:03.753Z",
    "dateUpdated": "2026-03-07T04:55:22.751Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28714 (GCVE-0-2026-28714)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:51 – Updated: 2026-03-09 17:19

Summary

Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

Severity

4.8 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

CWE-522

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28714",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-09T17:19:49.028392Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-09T17:19:55.828Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:51:47.409Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-5383",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-5383"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2026-28714",
    "datePublished": "2026-03-05T23:51:47.409Z",
    "dateReserved": "2026-03-03T02:29:03.753Z",
    "dateUpdated": "2026-03-09T17:19:55.828Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28715 (GCVE-0-2026-28715)

Vulnerability from cvelistv5 – Published: 2026-03-05 23:52 – Updated: 2026-03-09 17:19

Summary

Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

Severity

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-863

Assigner

Acronis

References

1 reference

URL	Tags
https://security-advisory.acronis.com/advisories/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Acronis	Acronis Cyber Protect 17	Affected: unspecified , < 41186 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28715",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-09T17:19:25.874254Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-09T17:19:34.034Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows"
          ],
          "product": "Acronis Cyber Protect 17",
          "vendor": "Acronis",
          "versions": [
            {
              "lessThan": "41186",
              "status": "affected",
              "version": "unspecified",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-05T23:52:09.573Z",
        "orgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
        "shortName": "Acronis"
      },
      "references": [
        {
          "name": "SEC-5910",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security-advisory.acronis.com/advisories/SEC-5910"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "73dc0fef-1c66-4a72-9d2d-0a0f4012c175",
    "assignerShortName": "Acronis",
    "cveId": "CVE-2026-28715",
    "datePublished": "2026-03-05T23:52:09.573Z",
    "dateReserved": "2026-03-03T02:29:03.753Z",
    "dateUpdated": "2026-03-09T17:19:34.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-0620

CVE-2025-11790 (GCVE-0-2025-11790)

CVE-2025-11791 (GCVE-0-2025-11791)

CVE-2025-11792 (GCVE-0-2025-11792)

CVE-2026-28709 (GCVE-0-2026-28709)

CVE-2026-28710 (GCVE-0-2026-28710)

CVE-2026-28711 (GCVE-0-2026-28711)

CVE-2026-28712 (GCVE-0-2026-28712)

CVE-2026-28713 (GCVE-0-2026-28713)

CVE-2026-28714 (GCVE-0-2026-28714)

CVE-2026-28715 (GCVE-0-2026-28715)

Tags

Sightings

Nomenclature