PT-2025-23803 · Acronis · Acronis Cyber Protect 16

Published 2025-06-04 · Updated 2025-06-04 · CVE-2025-48960

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 16 versions prior to build 39938

Description The issue is related to a weak server key used for TLS encryption. This affects Acronis Cyber Protect 16 on various operating systems, including Linux, macOS, and Windows.

Recommendations For Acronis Cyber Protect 16 versions prior to build 39938, update to build 39938 or later to resolve the issue. As a temporary workaround, consider restricting the use of TLS encryption until the update is applied.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

BDU:2025-06511

CVE-2025-48960

Affected Products

Acronis Cyber Protect 16

References · 6

• https://bdu.fstec.ru/vul/2025-06511 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-48960 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-6403 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1930290326960230616 · Twitter Post
• https://twitter.com/CVEnew/status/1930262816231174280 · Twitter Post
• https://t.me/cvetracker/25402 · Telegram Post