CVE-2025-30407

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39713.

Metrics

CVSS 3.0 6.3/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-426

Affected software

No affected versions have been published.

Timeline

Published
Mar 26, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-304086.7Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoCVE-2025-304095.5Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Protect Cloud Agent (WinCVE-2025-30419.8A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of theCVE-2025-304109.8Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud ACVE-2025-3041110.0Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (LiCVE-2025-3041210.0Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (LiCVE-2025-304134.4Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud AgentCVE-2025-304157.5Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (LinuxCVE-2025-3041610.0Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (LinuCVE-2025-304177.8There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI CircuitCVE-2025-304187.8There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design SuiCVE-2025-304197.8There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circu
CVE-2025-30407: Medium severity, CVSS 6.3 | Vulnix