PT-2025-54831 · Acronis · Acronis Cyber Protect 15+3

Airbus Seclab + 3 · Published 2025-06-04 · Updated 2026-02-20 · CVE-2025-30410

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent versions prior to build 39870 Acronis Cyber Protect 16 versions prior to build 39938 Acronis Cyber Protect 15 versions prior to build 41800

Description The software suffers from a flaw allowing sensitive data disclosure and manipulation because of a lack of authentication.

Recommendations Update Acronis Cyber Protect Cloud Agent to build 39870 or later. Update Acronis Cyber Protect 16 to build 39938 or later. Update Acronis Cyber Protect 15 to build 41800 or later.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-30410

Affected Products

Acronis

Acronis Cyber Protect 15

Acronis Cyber Protect 16

Acronis Cyber Protect Cloud Agent

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-30410 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-8641 · Vendor Advisory
• https://twitter.com/CveFindCom/status/2024834586182648134 · Twitter Post
• https://t.me/cveNotify/152546 · Telegram Post
• https://twitter.com/TheHackerWire/status/2024654500779446547 · Twitter Post