PT-2025-54831

CVE-2025-30410

Published

2025-06-04

Updated

2026-02-20

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent versions prior to build 39870 Acronis Cyber Protect 16 versions prior to build 39938 Acronis Cyber Protect 15 versions prior to build 41800

Description The software suffers from a flaw allowing sensitive data disclosure and manipulation because of a lack of authentication.

Recommendations Update Acronis Cyber Protect Cloud Agent to build 39870 or later. Update Acronis Cyber Protect 16 to build 39938 or later. Update Acronis Cyber Protect 15 to build 41800 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-306: Missing Authentication for Critical Function