CVE-2025-48961 | THREATINT

Description

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39938.

Reserved 2025-05-29 | Published 2025-06-04 | Updated 2025-06-04 | Assigner Acronis

HIGH: 7.3CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-732

Product status

Default status

unaffected

Any version before 39938

affected

Credits

@s3nds3c (https://hackerone.com/s3nds3c) finder

References

security-advisory.acronis.com/advisories/SEC-8000 (SEC-8000) vendor-advisory

cve.org (CVE-2025-48961)

nvd.nist.gov (CVE-2025-48961)

Download JSON