Acronis Cyber Protect 17 Update 1 Fixes Twelve Security Issues
Tech GuruQuick Answer
Acronis published twelve advisories for Cyber Protect 17 Update 1, with one also affecting the Cloud Agent for Windows. Inventory exact products, platforms and builds, install build 42587 or Cloud Agent 42569 as applicable, validate backup and recovery workflows, and retain evidence.
Confirm Scope And Apply The Supported Remediation
What to do now: Inventory Cyber Protect 17 and Cloud Agent deployments, exact builds and platforms, service accounts, management exposure, backup repositories, owners, protected workloads, and maintenance windows. Match each platform and product to its individual advisory; do not extend the Cloud Agent finding beyond CVE-2025-30414 or assume every issue affects Linux, macOS and Windows equally. Install Cyber Protect 17 build 42587 and Cloud Agent for Windows build 42569 where applicable through Acronis-supported channels, then retire superseded installation media and deployment packages. Confirm active builds, test representative backup, restore, policy, agent and management workflows, verify service identity and connectivity, review relevant access where warranted, and retain package and change evidence.
Last verified: 2026-10-28 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | Acronis Cyber Protect 17 and Acronis Cyber Protect Cloud Agent for Windows |
|---|---|
| Advisory | UPD-2606-cfba-926e / UPD-2606-a90c-0163 / SEC-5613 / SEC-6066 / SEC-8648 / SEC-8835 / SEC-9425 / SEC-9812 / SEC-9813 / SEC-9814 / SEC-10003 / SEC-10289 / SEC-10681 / SEC-11343 |
| CVEs | CVE-2025-30414, CVE-2026-87097, CVE-2026-87098, CVE-2026-87099, CVE-2026-87100, CVE-2026-87101, CVE-2026-87102, CVE-2026-87103, CVE-2026-87878, CVE-2026-87879, CVE-2026-87880 |
| Authoritative release date | 2026-10-28 09:00:16 UTC |
| Authority revision date | 2026-10-28 09:00:16 UTC |
| Affected versions | Cyber Protect 17 builds before 42587 on the platforms listed per advisory; CVE-2025-30414 also affects Cyber Protect Cloud Agent for Windows before build 42569. Individual issues and platforms differ. |
| Fixed version | Acronis Cyber Protect 17 build 42587; Acronis Cyber Protect Cloud Agent for Windows build 42569 for CVE-2025-30414 |
| CVSS base score | 3.1-7.4 (CVSS v3.0; CVE-assigned issues) |
| CVSS severity | Low to High |
| Exploitation status | Acronis says it sees no signs of active exploitation of the vulnerabilities listed in these updates.; no exploitation claim is inferred. |
What Changed
Acronis published twelve security advisories covering credential or token disclosure, token manipulation, local privilege escalation, XSS, hardening gaps, and third-party dependencies in Cyber Protect 17; one issue also affects the Cloud Agent.
What To Validate Now
- Inventory. Inventory Cyber Protect 17 and Cloud Agent deployments, exact builds and platforms, service accounts, management exposure, backup repositories, owners, protected workloads, and maintenance windows.
- Establish applicability. Match each platform and product to its individual advisory; do not extend the Cloud Agent finding beyond CVE-2025-30414 or assume every issue affects Linux, macOS and Windows equally.
- Remediate. Install Cyber Protect 17 build 42587 and Cloud Agent for Windows build 42569 where applicable through Acronis-supported channels, then retire superseded installation media and deployment packages.
- Validate. Confirm active builds, test representative backup, restore, policy, agent and management workflows, verify service identity and connectivity, review relevant access where warranted, and retain package and change evidence.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
Backup-platform updates can affect protected workloads, agents and recovery objectives. Stage the update, preserve recoverability, and treat Acronis's no-exploitation statement as vendor visibility rather than proof for a specific environment.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
