CVE-2025-30410CWE-306

Sensitive data disclosure and manipulation due to missing authentication

Critical · published February 20, 2026

CVSS v3.0
9.8
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 39870, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 41800.

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00688 · 52.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-20T00:31Z
EPSS history
Timeline
  • 20 FEB 00:31Z
    Sensitive data disclosure and manipulation due to missing authentication
    cvelistv5