CVE-2025-30412Disclosure(acronis / cyber_protect)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch acronis cyber_protect systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.

acronis CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security-advisory.acronis.com/advisories/SEC-8598

Weakness type (CWE)

CWE-1390

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

cyber_protect
linux_kernel
windows

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-02-20); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

acronis linux microsoft

Products

cyber_protectlinux_kernelwindows

2 versions affected across 3 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

Disclosure

250.0%

General

125.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-20	3	Disclosure1General1Patch1
2026-03-12	1	Disclosure1

Full discourse4 posts

DailyCVE@dailycve211d
Disclosure
🔴 Acronis Cyber Protect, Improper Authentication, #CVE-2025-30412 (Critical) https://dailycve.com/acronis-cyber-protect-improper-authentication-cve-2025-30412-critical/
Post summary
The post announces CVE‑2025‑30412, an Improper Authentication flaw in Acronis Cyber Protect, classified as critical, with a link to a DailyCVE article for further details.
0000077
167 followersView on X
CVEFind.com@CveFindCom232d
Patch
[CVE-2025-30412: CRITICAL] Data disclosure & manipulation risk in Acronis Cyber Protect 16 & 15 due to authentication flaws. Vulnerable versions listed. Update now to stay secure!#cve,CVE-2025-30412,#cybersecurity https://cvefind.com/CVE-2025-30412
Post summary
A critical authentication flaw in Acronis Cyber Protect versions 16 and 15 allows data disclosure and manipulation; users are urged to apply updates to mitigate the risk.
0000046
578 followersView on X
CVE@CVEnew232d
General
CVE-2025-30412 Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build… https://www.cve.org/CVERecord?id=CVE-2025-30412
Post summary
The post announces CVE-2025-30412 affecting Acronis Cyber Protect 16, detailing improper authentication that leads to data disclosure/manipulation, but offers no exploit, patch, or active exploitation information.
0000091
56.4K followersView on X
The Hacker Wire@TheHackerWire232d
Disclosure
🔴 CVE-2025-30412 - Critical Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber... https://www.thehackerwire.com/vulnerability/CVE-2025-30412/ https://t.co/HKJj2wZxTx
Post summary
Acronis Cyber Protect 16 (Linux, Windows) versions prior to build 39938 are vulnerable to CVE-2025-30412, a critical flaw that permits sensitive data disclosure and manipulation due to improper authentication.
0000057
112 followersView on X

CPE platform detail13 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

13 of 13 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	acronis	cyber_protect	15	-	-
App	acronis	cyber_protect	15	-	-
App	acronis	cyber_protect	15	-	-
App	acronis	cyber_protect	15	-	-
App	acronis	cyber_protect	15	-	-
App	acronis	cyber_protect	15	-	-
App	acronis	cyber_protect	15	-	-
App	acronis	cyber_protect	16	-	-
App	acronis	cyber_protect	16	-	-
App	acronis	cyber_protect	16	-	-
App	acronis	cyber_protect	16	-	-
OS	linux	linux_kernel	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard acronis CVEs linux CVEs microsoft CVEs cyber_protect vulnerabilities

What researchers are saying

CVE-2025-30412

DailyCVE@dailycveDisclosure

The post announces CVE‑2025‑30412, an Improper Authentication flaw in Acronis Cyber Protect, classified as critical, with a link to a DailyCVE article for further details.

CVEFind.com@CveFindComPatch

A critical authentication flaw in Acronis Cyber Protect versions 16 and 15 allows data disclosure and manipulation; users are urged to apply updates to mitigate the risk.

CVE@CVEnewGeneral

The post announces CVE-2025-30412 affecting Acronis Cyber Protect 16, detailing improper authentication that leads to data disclosure/manipulation, but offers no exploit, patch, or active exploitation information.

The Hacker Wire@TheHackerWireDisclosure

Acronis Cyber Protect 16 (Linux, Windows) versions prior to build 39938 are vulnerable to CVE-2025-30412, a critical flaw that permits sensitive data disclosure and manipulation due to improper authentication.