PT-2025-23804 · Acronis · Acronis Cyber Protect 16

S3Nds3C · Published 2025-06-04 · Updated 2025-06-04 · CVE-2025-48961

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 16 (Windows) versions before build 39938

Description The issue is related to local privilege escalation due to insecure folder permissions.

Recommendations For Acronis Cyber Protect 16 (Windows) versions before build 39938, update to build 39938 or later to resolve the issue.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2025-06439

CVE-2025-48961

Affected Products

Acronis Cyber Protect 16

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-48961 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-8000 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06439 · Security Note
• https://twitter.com/CVEnew/status/1930262815182635382 · Twitter Post
• https://t.me/cvetracker/25403 · Telegram Post