Acronis
Number 90 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
206
Critical
9
High
53
Known Exploited
2
Exploit available
1
Network, no login needed
9.8%
Of 183 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 53 | 5 | 17 | 28 | 3 | 0 |
| 2025 | 27 | 0 | 7 | 19 | 1 | 0 |
| 2024 | 33 | 2 | 7 | 15 | 9 | 0 |
| 2023 | 61 | 2 | 17 | 28 | 14 | 0 |
| 2022 | 21 | 0 | 2 | 1 | 3 | 15 |
| 2021 | 7 | 0 | 0 | 0 | 0 | 7 |
| 2020 | 3 | 0 | 3 | 0 | 0 | 0 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2017 | 1 | 0 | 0 | 0 | 0 | 1 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Acronis Cyber Protect Cloud Agent | 38 | 15 |
| Acronis Cyber Protect 15 | 30 | 4 |
| Acronis Cyber Protect 17 | 29 | 6 |
| Acronis Cyber Protect 16 | 22 | 5 |
| Acronis Agent | 19 | 3 |
| Acronis Cyber Protect Home Office | 19 | 8 |
| Acronis Snap Deploy | 8 | 0 |
| Acronis True Image | 8 | 3 |
| Acronis DeviceLock DLP | 7 | 6 |
| Acronis Backup plugin for cPanel & WHM | 5 | 2 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Missing Authorization | 18 | 10 |
| Incorrect Permissions | 13 | 3 |
| Information Disclosure | 12 | 1 |
| Cross-Site Scripting | 11 | 0 |
| Incorrect Authorization | 10 | 1 |
| Privilege Escalation | 7 | 7 |
| Authentication Issues | 6 | 2 |
| Insecure Direct Object Reference | 5 | 1 |
| Cleartext Transmission of Sensitive Information | 3 | 0 |
| Credential Exposure | 3 | 0 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-87886 | Acronis Backup plugin for cPanel & WHM: Incorrect Permissions | High | 0.2% | |
| CVE-2023-45249 | Acronis Cyber Infrastructure vulnerability | Critical | 53.5% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-87880 | Acronis Cyber Protect 17 vulnerability | Medium | 0.1% | |
| CVE-2026-87879 | Acronis Cyber Protect 17 vulnerability | Medium | 0.2% | |
| CVE-2026-87878 | Acronis Cyber Protect 17 vulnerability | Medium | 0.1% | |
| CVE-2026-87103 | Acronis Cyber Protect 17 vulnerability | High | 0.2% | |
| CVE-2026-87102 | Acronis Cyber Protect 17 vulnerability | High | 0.2% | |
| CVE-2026-87101 | Acronis Cyber Protect 17 vulnerability | Medium | 0.1% | |
| CVE-2026-87100 | Acronis Cyber Protect 17 vulnerability | Low | 0.1% | |
| CVE-2026-87099 | Acronis Cyber Protect 17: Cross-Site Scripting | Medium | 0.2% | |
| CVE-2026-87098 | Acronis Cyber Protect 17: Insecure Direct Object Reference | Low | 0.2% | |
| CVE-2026-87097 | Acronis Cyber Protect 17: Credential Exposure | Medium | 0.2% |