PT-2025-54831 · Acronis · Acronis Cyber Protect 15+3

Airbus Seclab + 3 · Publicado 2025-06-04 · Atualizado 2026-02-20 · CVE-2025-30410

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent versions prior to build 39870 Acronis Cyber Protect 16 versions prior to build 39938 Acronis Cyber Protect 15 versions prior to build 41800

Description The software suffers from a flaw allowing sensitive data disclosure and manipulation because of a lack of authentication.

Recommendations Update Acronis Cyber Protect Cloud Agent to build 39870 or later. Update Acronis Cyber Protect 16 to build 39938 or later. Update Acronis Cyber Protect 15 to build 41800 or later.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2025-30410

Produtos afetados

Acronis

Acronis Cyber Protect 15

Acronis Cyber Protect 16

Acronis Cyber Protect Cloud Agent

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-30410 · Nota de Segurança
• https://twitter.com/CveFindCom/status/2024834586182648134 · Publicação no Twitter
• https://t.me/cveNotify/152546 · Publicação no Telegram
• https://twitter.com/TheHackerWire/status/2024654500779446547 · Publicação no Twitter
• https://security-advisory.acronis.com/advisories/SEC-8641 · Aviso do Fabricante