Critical Authentication Vulnerabilities in Acronis Products

What changed

Acronis has identified critical vulnerabilities in several of its products that stem from missing authentication mechanisms. These flaws could lead to unauthorized access and manipulation of sensitive data, posing a serious risk to users.

The affected products include Acronis Cyber Protect Cloud Agent and various versions of Acronis Cyber Protect, which are used across multiple operating systems.

Who is affected

The vulnerabilities impact a wide range of users and organizations utilizing Acronis products for data protection and backup solutions. The following groups are particularly at risk:

Organizations relying on Acronis for cloud-based data management may face significant security threats due to these vulnerabilities.

• Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870
• Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938
• Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 41800

What to do

Users of the affected Acronis products are urged to take immediate action to mitigate risks. Upgrading to the latest builds is essential to ensure that these vulnerabilities are addressed.

Regularly reviewing security practices and staying informed about updates from Acronis can help prevent potential data breaches.

• Upgrade to the latest builds of Acronis products to patch vulnerabilities.
• Implement additional security measures to safeguard sensitive data.
• Stay updated with Acronis communications regarding security advisories.