CVE-2025-30411

The vulnerability stems from insufficient or improperly implemented authentication procedures in Acronis Cyber Protect. An attacker can remotely bypass access control mechanisms without possessing an account or permissions. As a result, it is possible to read and modify protected data processed by the software. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C) indicates that the attack is possible over the network, with low complexity and without any prerequisites on the attacker's side.

An attacker can gain unauthorized access to sensitive data (confidentiality) and modify it (integrity), and may potentially disrupt system availability — all from the network level, without any authentication.

Acronis Cyber Protect 16 must be updated immediately to build 39938 or newer, and Acronis Cyber Protect 15 to build 41800 or newer. Details are available in the official producer security bulletin: https://security-advisory.acronis.com/advisories/SEC-8768

Acronis Cyber Protect 16 (Linux, Windows) in versions before build 39938 and Acronis Cyber Protect 15 (Linux, Windows) in versions before build 41800.