CVE-2025-30412
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 10
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS probability
- 0.62%
- CWE
- CWE-1390
- Published
- 2026-02-20
- Last modified
- 2026-03-12
Affected products
- Acronis Acronis Cyber Protect 16
- Acronis Acronis Cyber Protect 15
Weakness type
Related vulnerabilities
- CVE-2026-77483 — SQL Server Elevation of Privilege Vulnerability
- CVE-2026-73025 — Windows iSCSI Security Feature Bypass Vulnerability
- CVE-2026-62895 — Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
- CVE-2026-80219 — Hawtio-operator: hawtio-operator: oauthclient created with grantmethod auto and no secret enables oauth token theft
- CVE-2026-73819 — Ebyte NA111-M Weak Authentication
- CVE-2026-44476 — Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret
- CVE-2026-65098 — NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an...
- CVE-2026-68067 — Mira Hormone Monitor, Mira Android App Weak Authentication