CVE-2025-11791

High CVSS: 7.1

Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.

Vendor

Acronis

Product

Agent

CWE

CWE-862

Yayın Tarihi

2026-03-06 00:16:09

Güncelleme

2026-03-13 16:33:56

Source Identifier

security@acronis.com

KEV Date Added

Kategoriler

CWE-862 Agent HIGH Acronis 2026

Referanslar

https://security-advisory.acronis.com/advisories/SEC-9405

Benzer Kayıtlar

High

CVE-2026-28721

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec…

High

CVE-2026-28722

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec…

Medium

CVE-2026-28723

Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Prot…

Medium

CVE-2026-28724

Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyb…

Medium

CVE-2026-28725

Sensitive information disclosure due to improper configuration of a headless browser. The following products are affecte…

Medium

CVE-2026-28726

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Prot…