CVE-2025-30414
High · 7.1CVSS
7.1
EPSS
0.2%
Published
Oct 28, 2026
CISA due date
—
The record
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115967 Weak Authentication vulnerability in Hamid Alinia Login with phone number… CWE-1390
- CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security… CWE-1390
- CVE-2026-83840 Weak authentication in Windows Error Reporting allows an authorized attacker to elevate… CWE-1390
- CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
- CVE-2026-83657 Weak authentication in Windows Modern Device Management (MDM) allows an authorized… CWE-1390
- CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows… CWE-1390
- CVE-2026-83511 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
- CVE-2026-70005 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390