PT-2026-23584 · Acronis · Acronis Cyber Protect 17

CVE-2026-28710 · Publicado 2026-03-05 · Atualizado 2026-03-12

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 (Linux, Windows) versions prior to build 41186

Description The software suffers from a flaw related to improper authentication, leading to potential sensitive information disclosure and manipulation. The issue allows for privilege escalation.

Recommendations Update Acronis Cyber Protect 17 (Linux, Windows) to build 41186 or later.

Correção

LPE

Enumeração de Fraquezas

CWE-1390

Identificadores relacionados

CVE-2026-28710

Produtos afetados

Acronis Cyber Protect 17

Referências · 7

• https://t.me/cveNotify/155331 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-28710 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2029879546540118326 · Publicação no Twitter
• https://security-advisory.acronis.com/advisories/SEC-9137 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2029840626192109692 · Publicação no Twitter
• https://t.me/CVEtracker/46515 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-28710 · Nota de Segurança