CVE-2025-11790

Low

Low Medium High Critical

CVSS Score

Published: Mar 06, 2026

Last Modified: Mar 13, 2026

Vulnerability Description

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 41124.

References & Resources

https://security-advisory.acronis.com/SEC-8658
security@acronis.com Not Applicable
https://security-advisory.acronis.com/advisories/SEC-9386
security@acronis.com Vendor Advisory

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-732

Incorrect Permission Assignment for Critical Resource

Description: The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Exploit Likelihood: High
Typical Severity: High
Abstraction Level: Class

View CWE Details on MITRE

Key Information

Published Date: March 06, 2026

External Resources

NIST NVD

National Vulnerability Database

MITRE CVE

Official CVE record

CVE Vulnerabilities

Posts & Pages