Riskcovery

CVE-2025-30410

State
Published
Severity
9.8 Critical
Published
Feb 20, 2026
Updated
Feb 26, 2026
Reserved
Mar 21, 2025

Read the record on cve.org

Description

Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 41800.

Scores

CVSSScoreVectorSource
3.09.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAcronis

Weaknesses

Affected Products

ProductVersions
Acronis Cyber Protect Cloud AgentAcronis
  • before 39870Affected
Acronis Cyber Protect 16Acronis
  • before 39938Affected
Acronis Cyber Protect 15Acronis
  • before 41800Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.