Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1008427 – Bounty: $250 [Source]