Live › vulnerability › CVE-2025-30414
Go to dashboardAcronis Cyber Protect Cloud Agent and Cyber Protect 17 on Windows have an authentication flaw that lets a local user gain higher privileges. The sources do not describe the exact mechanism beyond improper authentication.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 11:32 UTC. All times on this page are UTC.
Windows hosts running the Acronis Cyber Protect Cloud Agent or Acronis Cyber Protect 17 before the fixed builds are exposed. An attacker needs a local account on the machine, so shared or multi-user Windows systems carry more risk than single-user ones. Hosts without these products installed can skip it.
No product ranges from the sources yet.
42569.42587.42569 or later.42587 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.
This page as .md · .json · in your agent: get_signal("CVE-2025-30414")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.