CVE-2025-11791

HIGH 7.1CVE-2025-11791 · Published 06/03/2026 · updated 17/06/2026

In short

CVE-2025-11791 is a HIGH (CVSS 7.1) vulnerability affecting agent (acronis), cyber protect (acronis).
Chance of exploitation in the next 30 days (EPSS): 0.11%, higher than 1.2% of all vulnerabilities.
Fix: update to c25.10, 17.0.41186 or later.

Package	Affected versions	Patched versions
agent acronis	`< c25.10`	`c25.10`
cyber protect acronis	`< 17.0.41186`	`17.0.41186`

Description

Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.

References

security-advisory.acronis.com/advisories/SEC-9405 · Vendor Advisory

More vulnerabilities in agent

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

agent

acronis

< c25.10

c25.10

cyber protect

acronis

< 17.0.41186

17.0.41186

More vulnerabilities in agent

See all →