CVE-2024-49392: Acronis Cyber Files

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.

Affected products

• Acronis Cyber Files: before 9.0 (fixed in 9.0)

Published 2024-10-17. Last modified 2026-06-17.