CVE-2025-30412
Critical · 10.0CVSS
10.0
EPSS
0.7%
Published
Feb 20, 2026
CISA due date
—
The record
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-73819 The affected Ebyte product's vendor configuration utility permits access to… CWE-1390
- CVE-2026-44476 Doorkeeper is an OAuth 2 provider for Ruby on Rails. CWE-1390
- CVE-2026-65098 NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow… CWE-1390
- CVE-2026-68067 The login endpoint on the Mira cloud API accepts any format-valid string in the password… CWE-1390
- CVE-2026-59135 Weak authentication in Microsoft Windows Search Component allows an authorized attacker… CWE-1390
- CVE-2026-55040 Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to… CWE-1390
- CVE-2026-0274 An improper validation of credentials vulnerability in the CommvaultSecurityIQ… CWE-1390
- CVE-2026-6274 Improper Authentication, Missing authentication for critical function, Weak… CWE-1390