Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Acronis bug bounty programs

acronis.com Updated

Acronis runs one public program: a HackerOne bug bounty paying up to $10,000.

Top reward
$10,000
HackerOne
Programs
1
1 pays cash
Targets in scope
21
6 types
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program Acronis runs.

  • Acronis

    HackerOne · Bug bounty

    Open

    Top reward

    $10k
    Critical
    $10k
    High
    $3,500
    Medium
    $2,000
    Low
    $1,000
    Safe harbor
    Full
    First response
    5 days promised

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

21 targets. 2 excluded.

  • *-api-*.acronis.com

    Wildcards Critical

  • *.5nine.com

    Wildcards Critical

  • *.acronis.com

    Wildcards Critical

  • *.acronis.work

    Wildcards Critical

  • *.devicelock.com

    Wildcards Critical

  • account.acronis.com

    Web Critical

  • beta-cloud.acronis.com

    Web Critical

  • com.acronis.abc

    Android Critical

  • com.acronis.acronistrueimage

    Android Critical

  • 978342143

    iOS Critical

  • 1118448159

    iOS Critical

  • 1192506963

    iOS Critical

  • Acronis Agent

    Desktop and binaries Critical

  • Acronis Cloud Manager

    Desktop and binaries Critical

  • Acronis Cyber Protect

    Desktop and binaries Critical

  • Acronis DeviceLock DLP

    Desktop and binaries Critical

  • Acronis Snap Deploy

    Desktop and binaries Critical

  • Acronis True Image (formerly Acronis Cyber Protect Home Office)

    Desktop and binaries Critical

  • Other Acronis executables

    Desktop and binaries Critical

  • Acronis Cyber Infrastructure

    Products and areas Critical

  • Other Acronis Domains

    Products and areas Medium

No target matches. Try part of a host name, such as the company name.

Out of scope 2

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • learn.acronis.com

  • training.acronis.com

Recent changes

Reward and scope changes across every Acronis program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in Acronis products, from the NVD.

Search NVD
  • CVE-2026-87886 High

    Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

  • CVE-2026-33271 Medium

    Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.

  • CVE-2026-28728 Medium

    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.

  • CVE-2026-27774 Medium

    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.

  • CVE-2026-28725 Medium

    Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

  • CVE-2026-28726 Medium

    Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

  • CVE-2026-28727 High

    Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image (macOS) before build 42902.

  • CVE-2026-28718 High

    Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

About this page

This page gathers every public program listed under acronis.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.