CVE-2025-30410

Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 41800.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://security-advisory.acronis.com/advisories/SEC-8641

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Divulgación y manipulación de datos sensibles debido a la falta de autenticación. Los siguientes productos están afectados: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) antes de la compilación 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) antes de la compilación 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) antes de la compilación 41800.

20 Feb 2026, 01:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-20 01:15

Updated : 2026-06-17 09:08

NVD link : CVE-2025-30410

Mitre link : CVE-2025-30410

CVE.ORG link : CVE-2025-30410

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-30410", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-30410", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-02-21T04:56:28.170167Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "security@acronis.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@acronis.com", "affectedData": [{"vendor": "Acronis", "product": "Acronis Cyber Protect Cloud Agent", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "39870", "versionType": "semver"}], "platforms": ["Linux", "macOS", "Windows"], "defaultStatus": "unaffected"}, {"vendor": "Acronis", "product": "Acronis Cyber Protect 16", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "39938", "versionType": "semver"}], "platforms": ["Linux", "macOS", "Windows"], "defaultStatus": "unaffected"}, {"vendor": "Acronis", "product": "Acronis Cyber Protect 15", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "41800", "versionType": "semver"}], "platforms": ["Linux", "macOS", "Windows"], "defaultStatus": "unaffected"}]}], "published": "2026-02-20T01:15:59.270", "references": [{"url": "https://security-advisory.acronis.com/advisories/SEC-8641", "source": "security@acronis.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@acronis.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 41800."}, {"lang": "es", "value": "Divulgaci\u00f3n y manipulaci\u00f3n de datos sensibles debido a la falta de autenticaci\u00f3n. Los siguientes productos est\u00e1n afectados: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) antes de la compilaci\u00f3n 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) antes de la compilaci\u00f3n 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) antes de la compilaci\u00f3n 41800."}], "lastModified": "2026-06-17T09:08:40.503", "sourceIdentifier": "security@acronis.com"}