CVE-2025-30410: Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS…

PriorityP358critical9.8CVSS 3.0

AVNACLPRNUINSUCHIHAH

EPSS

0.55%

41.9th percentile

Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 41800.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_cyber_protect_15	>= unspecified < 41800	41800
acronis	acronis_cyber_protect_16	>= unspecified < 39938	39938
acronis	acronis_cyber_protect_cloud_agent	>= unspecified < 39870	39870

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.