CVE-2021-38087: Acronis Cyber Protect

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009.

Affected products

• Acronis Cyber Protect: before 15 (fixed in 15); version 15 only

Published 2021-08-12. Last modified 2026-06-17.