CVE-2024-55538

Severity: medium (CVSS 4.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-02 · updated 2026-06-17
Weakness: CWE-306

Description

Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build 41725, Acronis True Image (Windows) before build 41736, Acronis True Image OEM (macOS) before build 42571, Acronis True Image OEM (Windows) before build 42575.

Affected products

Acronis True Image OEM: before 42571; before 42575 — fixed in 42571, 42575
Acronis True Image: before 41725; before 41736 — fixed in 41725, 41736

How to fix

Upgrade to a fixed version: Acronis True Image OEM 42571, 42575; Acronis True Image 41725, 41736. Check the vendor advisory for mitigations.

References

https://security-advisory.acronis.com/advisories/SEC-2209

Get alerted when CVE-2024-55538 or the next vulnerability affects your stack