CVE-2025-30414

HIGH
MEDIUM Priority: 0.02 BB Relevance: 39/100
Published: 2026-10-28 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: None

Description

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Acronis Acronis Cyber Protect Cloud Agent unspecified < 42569

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS — Exploitation Probability

0.21%
Raw Score 0.002120
Percentile 11.5%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →