by Kastro
Paper/Archive/CVE-2025-30410

CVE-2025-30410

Acronis Acronis Cyber Protect Cloud Agent — Sensitive data disclosure and manipulation due to missing authentication.

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.7.527 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 41800.

Affected

ProductAffectedFixed inSource
Acronis Cyber Protect Cloud Agentunspecified – < 3987039870CNA
Acronis Cyber Protect 16unspecified – < 3993839938CNA
Acronis Cyber Protect 15unspecified – < 4180041800CNA

Scores by source

Acronis (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorysecurity-advisory.acronis.com/advisories/SEC-8641