Approved changes feed: RSS · Atom

cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAcronis (d64000ef-8c61-5ba5-86d7-61c680cdcd75)
ProductAgent (4431c736-5b53-56d3-98ec-e5750d8d2070)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-28727 vulnerable 2026-06-03 15:18:08.607363 Details available
HIGH (7.8)
Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.
Published: 2026-03-05T23:45:20.331Z
Updated: 2026-04-02T17:05:54.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28713 vulnerable 2026-06-03 15:18:08.600845 Details available
HIGH (7.1)
Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.
Published: 2026-03-05T23:51:30.830Z
Updated: 2026-03-07T04:55:22.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30413 vulnerable 2026-06-03 15:00:28.264675 Details available
MEDIUM (4.4)
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
Published: 2026-03-05T23:56:29.887Z
Updated: 2026-03-06T19:33:57.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11792 vulnerable 2026-06-03 14:58:43.073931 Details available
HIGH (7.3)
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 41124.
Published: 2026-03-05T23:45:55.938Z
Updated: 2026-03-06T19:34:53.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11791 vulnerable 2026-06-03 14:58:43.072164 Details available
MEDIUM (5.5)
Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.
Published: 2026-03-05T23:46:27.697Z
Updated: 2026-03-06T19:34:47.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11790 vulnerable 2026-06-03 14:58:43.070088 Details available
MEDIUM (4.4)
Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.
Published: 2026-03-05T23:47:00.724Z
Updated: 2026-03-06T19:34:40.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4688 vulnerable 2026-06-03 14:53:29.317294 Details available
MEDIUM (4.4)
Sensitive information leak through log files. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35433.
Published: 2023-08-31T20:26:56.338Z
Updated: 2024-09-26T20:35:33.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48676 vulnerable 2026-06-03 14:53:19.624603 Details available
LOW (3.3)
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36943.
Published: 2023-12-14T13:32:28.791Z
Updated: 2024-08-02T21:37:54.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45248 vulnerable 2026-06-03 14:53:07.860291 Details available
MEDIUM (6.6)
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
Published: 2023-10-09T11:08:37.009Z
Updated: 2025-06-16T17:06:45.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45247 vulnerable 2026-06-03 14:53:07.859839 Details available
HIGH (7.1)
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.
Published: 2023-10-09T11:09:00.897Z
Updated: 2025-06-16T17:05:43.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45246 vulnerable 2026-06-03 14:53:07.859252 Details available
HIGH (7.1)
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.
Published: 2023-10-06T10:07:06.167Z
Updated: 2025-01-02T15:25:18.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45245 vulnerable 2026-06-03 14:53:07.853957 Details available
LOW (3.3)
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.
Published: 2023-10-06T09:53:55.524Z
Updated: 2024-09-19T18:30:43.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45244 vulnerable 2026-06-03 14:53:07.853552 Details available
HIGH (7.1)
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 37391.
Published: 2023-10-06T09:47:15.441Z
Updated: 2024-08-02T20:14:19.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45243 vulnerable 2026-06-03 14:53:07.853179 Details available
MEDIUM (5.5)
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35739, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
Published: 2023-10-05T21:57:49.413Z
Updated: 2026-03-05T23:49:17.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45242 vulnerable 2026-06-03 14:53:07.852742 Details available
MEDIUM (5.5)
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35739, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.
Published: 2023-10-05T21:57:35.406Z
Updated: 2026-03-05T23:52:56.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45241 vulnerable 2026-06-03 14:53:07.852296 Details available
MEDIUM (4.4)
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35739, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 37391.
Published: 2023-10-05T21:57:23.228Z
Updated: 2024-09-20T13:12:02.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45240 vulnerable 2026-06-03 14:53:07.851799 Details available
MEDIUM (5.5)
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
Published: 2023-10-05T21:57:11.962Z
Updated: 2024-09-20T13:12:25.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44214 vulnerable 2026-06-03 14:53:05.688142 Details available
MEDIUM (5.5)
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
Published: 2023-10-05T21:57:00.522Z
Updated: 2024-09-20T13:12:51.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44213 vulnerable 2026-06-03 14:53:05.687612 Details available
LOW (3.3)
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 35739, Acronis Cyber Protect 16 (Windows) before build 37391.
Published: 2023-10-05T21:56:48.957Z
Updated: 2024-09-10T15:48:22.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44212 vulnerable 2026-06-03 14:53:05.687139 Details available
HIGH (7.3)
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 31477.
Published: 2023-10-05T21:01:44.247Z
Updated: 2024-09-19T18:49:02.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44211 vulnerable 2026-06-03 14:53:05.684801 Details available
HIGH (7.1)
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 31637, Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
Published: 2023-10-05T21:14:19.549Z
Updated: 2024-08-02T19:59:51.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41751 vulnerable 2026-06-03 14:52:52.291222 Details available
MEDIUM (6.3)
Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent (Windows) before build 32047.
Published: 2023-08-31T20:18:30.546Z
Updated: 2024-10-01T16:54:16.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41750 vulnerable 2026-06-03 14:52:52.290768 Details available
LOW (3.3)
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 32047.
Published: 2023-08-31T20:18:09.205Z
Updated: 2024-09-26T20:41:33.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41749 vulnerable 2026-06-03 14:52:52.290286 Details available
MEDIUM (4.4)
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
Published: 2023-08-31T20:17:55.126Z
Updated: 2024-09-26T20:44:01.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41745 vulnerable 2026-06-03 14:52:52.283058 Details available
MEDIUM (6.1)
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30991, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
Published: 2023-08-31T17:16:56.516Z
Updated: 2024-09-27T14:16:25.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41744 vulnerable 2026-06-03 14:52:52.282533 Details available
HIGH (7.8)
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.
Published: 2023-08-31T15:14:13.720Z
Updated: 2024-10-01T17:25:21.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41743 vulnerable 2026-06-03 14:52:52.278569 Details available
HIGH (8.8)
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979, Acronis True Image OEM (Windows) before build 42575.
Published: 2023-08-31T15:04:10.802Z
Updated: 2026-04-10T13:15:35.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41742 vulnerable 2026-06-03 14:52:52.266352 Details available
MEDIUM (4.3)
Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
Published: 2023-08-31T14:27:28.948Z
Updated: 2024-09-27T14:17:36.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45459 vulnerable 2026-06-03 14:48:24.265926 Details available
LOW (3.8)
Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
Published: 2023-05-18T09:26:22.045Z
Updated: 2025-01-22T16:18:57.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45458 vulnerable 2026-06-03 14:48:24.265400 Details available
MEDIUM (4.2)
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
Published: 2023-05-18T09:25:04.232Z
Updated: 2025-01-22T14:43:05.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45457 vulnerable 2026-06-03 14:48:24.264883 Details available
MEDIUM (4.2)
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
Published: 2023-05-18T09:23:51.453Z
Updated: 2025-01-22T14:43:42.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45456 vulnerable 2026-06-03 14:48:24.264425 Details available
LOW (3.3)
Denial of service due to unauthenticated API endpoint. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 30161.
Published: 2023-04-26T19:54:03.119Z
Updated: 2025-01-30T21:28:40.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45455 vulnerable 2026-06-03 14:48:24.259786 Details available
MEDIUM (6.6)
Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
Published: 2023-02-13T09:27:01.356Z
Updated: 2025-03-21T14:48:25.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45454 vulnerable 2026-06-03 14:48:24.259285 Details available
LOW (2.2)
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.
Published: 2023-02-13T09:25:26.680Z
Updated: 2025-03-21T14:48:53.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45452 vulnerable 2026-06-03 14:48:24.258304 Details available
HIGH (7.3)
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.
Published: 2023-05-18T09:21:55.932Z
Updated: 2025-01-22T14:44:25.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45450 vulnerable 2026-06-03 14:48:24.249961 Details available
MEDIUM (5.4)
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
Published: 2023-05-18T09:27:38.534Z
Updated: 2025-01-22T16:18:42.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30990 vulnerable 2026-06-03 14:47:10.376836 Sensitive information disclosure due to insecure folder permissions
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037
Published: 2022-05-18T19:38:04.964Z
Updated: 2024-09-17T03:49:05.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24113 vulnerable 2026-06-03 14:46:29.352760 Local privilege escalation due to excessive permissions assigned to child processes
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287
Published: 2022-02-04T22:29:30.215Z
Updated: 2024-09-16T19:57:01.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44204 vulnerable 2026-06-03 14:45:35.630892 Local privilege escalation via named pipe due to improper access control checks
Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287
Published: 2022-02-04T22:29:33.071Z
Updated: 2024-09-17T01:12:21.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34800 vulnerable 2026-06-03 14:44:48.270410 Sensitive information could be logged
Sensitive information could be logged. The following products are affected: Acronis Agent (Windows, Linux, macOS) before build 27147
Published: 2021-11-29T19:16:14.115Z
Updated: 2024-09-16T19:30:26.012Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14999 vulnerable 2026-06-03 14:41:45.065430 Details available
A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Windows memory protection and access sensitive data.
Published: 2021-07-27T12:48:07.000Z
Updated: 2024-08-04T13:00:52.142Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.