Bug bounty program
AC
Acronis
Most upvoted reports128
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection in agent-managerAnalysed#962889 | SQL Injection | 2021-08-16 | – | 237 |
| bypass sql injection #1109311Analysed#1224660 | SQL Injection | 2021-10-05 | – | 164 |
| IDOR vulnerability (Price manipulation)Analysed#1403176 | Insecure Direct Object Reference | 2021-11-30 | – | 146 |
| Ticket Trick at https://account.acronis.comAnalysed#999765 | Access Control | 2020-11-10 | – | 142 |
| [oem.acronis.com] Reflected Cross Site ScriptingAnalysed#2038943 | Cross-site Scripting | 2024-12-28 | $100 | 134 |
| IP restriction bypass via X-Forwarded-For headerAnalysed#1224089 | Access Control | 2024-12-05 | $250 | 126 |
| Stored XSS in backup scanning plan nameAnalysed#961046 | Cross-site Scripting | 2021-06-28 | $500 | 120 |
| SQL injection on admin.acronis.host development web serviceAnalysed#923020 | SQL Injection | 2021-06-22 | $250 | 118 |
| Attacker Can Access to any Ticket Support on https://www.devicelock.com/support/Analysed#1124974 | Access Control | 2022-02-08 | – | 109 |
| Rate limit bypass on passport.acronis.work using X-Forwarded-For request headerAnalysed#2627062 | No weakness recorded | 2024-11-28 | – | 106 |
Subdomains2,285
| Name | Scope | First seen |
|---|---|---|
| 1password-jenkins.acronis.workci | In scope | 2026-11-14 |
| a.acronis.work | In scope | 2026-11-14 |
| aa-jenkins.acronis.workci | In scope | 2026-11-14 |
| ab-jenkins.acronis.workci | In scope | 2026-11-14 |
| abc-jenkins.acronis.workci | In scope | 2026-11-14 |
| abm-jenkins.acronis.workci | In scope | 2026-11-14 |
| accreports.acronis.work | In scope | 2026-11-14 |
| www.accreports.acronis.work | In scope | 2026-11-14 |
| acep.acronis.work | In scope | 2026-11-14 |
| 004553.werp-okta-test.acep.acronis.workauth, test | In scope | 2026-11-14 |
| wildcard.acep.acronis.work | In scope | 2026-11-14 |
| acss.acronis.work | In scope | 2026-11-14 |
| adaptive.acronis.work | In scope | 2026-11-14 |
| admin.acronis.workadmin | In scope | 2026-11-14 |
| adn.acronis.work | In scope | 2026-11-14 |
| www.adn.acronis.work | In scope | 2026-11-14 |
| adntest.acronis.work | In scope | 2026-11-14 |
| www.adntest.acronis.work | In scope | 2026-11-14 |
| db.ae01-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.ae01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.ae01-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.ae01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| ailyceum.acronis.work | In scope | 2026-11-14 |
| aiss.acronis.work | In scope | 2026-11-14 |
| grafana.amer.acronis.workmonitoring | In scope | 2026-11-14 |
| librenms.amer.acronis.work | In scope | 2026-11-14 |
| lighthouse.amer.acronis.work | In scope | 2026-11-14 |
| www.lighthouse.amer.acronis.work | In scope | 2026-11-14 |
| netportal.amer.acronis.work | In scope | 2026-11-14 |
| phx1-aci-01.amer.acronis.work | In scope | 2026-11-14 |
| phx1-aci-02.amer.acronis.work | In scope | 2026-11-14 |
| superset.amer.acronis.worktools | In scope | 2026-11-14 |
| ap.acronis.work | In scope | 2026-11-14 |
| librenms.apac.acronis.work | In scope | 2026-11-14 |
| lighthouse.apac.acronis.work | In scope | 2026-11-14 |
| aqa-backup-jenkins.acronis.workci, data | In scope | 2026-11-14 |
| artifactory.acronis.worktools | In scope | 2026-11-14 |
| artifactorytest.acronis.work | In scope | 2026-11-14 |
| asap.acronis.work | In scope | 2026-11-14 |
| db.at01-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.at01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.at01-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.at01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| atp-jenkins.acronis.workci | In scope | 2026-11-14 |
| db.au1-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.au1-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.au1-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.au1-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| auh1-aci.acronis.work | In scope | 2026-11-14 |
| aws.acronis.work | In scope | 2026-11-14 |
| awx.acronis.work | In scope | 2026-11-14 |
| awx-dev.acronis.workdev | In scope | 2026-11-14 |
| grafana.beta-baas.acronis.workmonitoring, staging | In scope | 2026-11-14 |
| db.beta-cloud.acronis.workdata, staging | In scope | 2026-11-14 |
| grafana.beta-cloud.acronis.workmonitoring, staging | In scope | 2026-11-14 |
| k8s.beta-cloud.acronis.workstaging, tools | In scope | 2026-11-14 |
| prometheus.beta-cloud.acronis.workmonitoring, staging | In scope | 2026-11-14 |
| bg-acmrnd.acronis.work | In scope | 2026-11-14 |
| bg-ap-12.acronis.work | In scope | 2026-11-14 |
| bg-passport.acronis.work | In scope | 2026-11-14 |
| bg-rnd-aci01.acronis.work | In scope | 2026-11-14 |
| bg-rnd-aci02.acronis.work | In scope | 2026-11-14 |
| db.bg01-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.bg01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.bg01-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.bg01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| grafana.bg91-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.bg91-cloud.acronis.worktools | In scope | 2026-11-14 |
| db.bg92-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.bg92-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.bg92-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.bg92-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| db.bg94-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.bg94-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.bg94-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.bg94-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| bll1-aci.acronis.work | In scope | 2026-11-14 |
| bom1-aci.acronis.work | In scope | 2026-11-14 |
| db.br01-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.br01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.br01-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.br01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| db.br02-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.br02-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.br02-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.br02-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| builds.acronis.workci | In scope | 2026-11-14 |
| bw.acronis.work | In scope | 2026-11-14 |
| db.ca01-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.ca01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.ca01-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.ca01-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| db.ca02-cloud.acronis.workdata | In scope | 2026-11-14 |
| grafana.ca02-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| k8s.ca02-cloud.acronis.worktools | In scope | 2026-11-14 |
| prometheus.ca02-cloud.acronis.workmonitoring | In scope | 2026-11-14 |
| callprep.acronis.work | In scope | 2026-11-14 |
| cbc.acronis.work | In scope | 2026-11-14 |
| clone.cbc.acronis.work | In scope | 2026-11-14 |
| stage.cbc.acronis.workstaging | In scope | 2026-11-14 |
2,283 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.