Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
21
Disclosed reports
128
Subdomains
2,285
Vendor on CyberSIXT
Acronis (232 CVEs, 2 exploited)

Most upvoted reports128

All reports
Most upvoted reports of Acronis
ReportWeaknessDisclosedBountyVotes
SQL Injection in agent-managerAnalysed#962889SQL Injection2021-08-16–237
bypass sql injection #1109311Analysed#1224660SQL Injection2021-10-05–164
IDOR vulnerability (Price manipulation)Analysed#1403176Insecure Direct Object Reference2021-11-30–146
Ticket Trick at https://account.acronis.comAnalysed#999765Access Control2020-11-10–142
[oem.acronis.com] Reflected Cross Site ScriptingAnalysed#2038943Cross-site Scripting2024-12-28$100134
IP restriction bypass via X-Forwarded-For headerAnalysed#1224089Access Control2024-12-05$250126
Stored XSS in backup scanning plan nameAnalysed#961046Cross-site Scripting2021-06-28$500120
SQL injection on admin.acronis.host development web serviceAnalysed#923020SQL Injection2021-06-22$250118
Attacker Can Access to any Ticket Support on https://www.devicelock.com/support/Analysed#1124974Access Control2022-02-08–109
Rate limit bypass on passport.acronis.work using X-Forwarded-For request headerAnalysed#2627062No weakness recorded2024-11-28–106

Subdomains2,285

Subdomains of Acronis
NameScopeFirst seen
api-dc-monitoring.acronis.comapi, monitoringIn scope2026-11-14
cloud-status.acronis.commonitoringIn scope2026-11-14
status.cloud.acronis.commonitoringIn scope2026-11-14
metrics.corp.acronis.cominternal, monitoringIn scope2026-11-14
www.metrics.corp.acronis.cominternal, monitoringIn scope2026-11-14
sentry.corp.acronis.cominternal, monitoringIn scope2026-11-14
us-rnd-grafana.corp.acronis.cominternal, monitoringIn scope2026-11-14
www.us-rnd-grafana.corp.acronis.cominternal, monitoringIn scope2026-11-14
webteam-grafana.corp.acronis.cominternal, monitoringIn scope2026-11-14
www.webteam-grafana.corp.acronis.cominternal, monitoringIn scope2026-11-14
dc-monitoring.acronis.commonitoringIn scope2026-11-14
dco-zabbix.acronis.commonitoringIn scope2026-11-14
draas-zabbix.acronis.commonitoringIn scope2026-11-14
www.draas-zabbix.acronis.commonitoringIn scope2026-11-14
monitoring.acronis.commonitoringIn scope2026-11-14
www.monitoring.acronis.commonitoringIn scope2026-11-14
notary-sentry.acronis.commonitoringIn scope2026-11-14
status.acronis.commonitoringIn scope2026-11-14
us-kibana.acronis.commonitoringIn scope2026-11-14
us-kibana-mon.acronis.commonitoringIn scope2026-11-14
us-sentry.acronis.commonitoringIn scope2026-11-14
zabbix-baas.acronis.commonitoringIn scope2026-11-14
grafana.ae01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.ae01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.amer.acronis.workmonitoringIn scope2026-11-14
grafana.at01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.at01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.au1-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.au1-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.beta-baas.acronis.workmonitoring, stagingIn scope2026-11-14
grafana.beta-cloud.acronis.workmonitoring, stagingIn scope2026-11-14
prometheus.beta-cloud.acronis.workmonitoring, stagingIn scope2026-11-14
grafana.bg01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.bg01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.bg91-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.bg92-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.bg92-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.bg94-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.bg94-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.br01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.br01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.br02-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.br02-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.ca01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.ca01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.ca02-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.ca02-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.cloud.acronis.workmonitoringIn scope2026-11-14
csl-grafana.acronis.workmonitoringIn scope2026-11-14
grafana.cz01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.cz01-cloud.acronis.workmonitoringIn scope2026-11-14
dc-monitoring.acronis.workmonitoringIn scope2026-11-14
grafana.de99-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.dk01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.dk01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.es01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.es01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.eu-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.eu-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.eu16-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.eu16-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.eu2-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.eu2-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.eu4-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.eu4-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.eu5-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.eu5-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.eu8-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.eu8-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.fi01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.fi01-cloud.acronis.workmonitoringIn scope2026-11-14
fra4-kibana.acronis.workmonitoringIn scope2026-11-14
grafana.godaddy-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.gr01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.gr01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.acronis.workmonitoringIn scope2026-11-14
grafana.heg-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.hu01-cloud.acronis.workmonitoringIn scope2026-11-14
iad2-kibana.acronis.workmonitoringIn scope2026-11-14
grafana.id01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.id01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.il01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.il01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.in01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.in01-cloud.acronis.workmonitoringIn scope2026-11-14
it-grafana.acronis.workmonitoringIn scope2026-11-14
grafana.it01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.it01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.jp-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.jp-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.jp03-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.jp03-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.kaseya-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.kaseya-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.kr01-cloud.acronis.workmonitoringIn scope2026-11-14
prometheus.kr01-cloud.acronis.workmonitoringIn scope2026-11-14
grafana.lh-cloud.acronis.workmonitoringIn scope2026-11-14
kibana.lh-cloud.acronis.workmonitoringIn scope2026-11-14
lh-load-kibana.lh-cloud.acronis.workmonitoringIn scope2026-11-14

2,283 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.