PT-2026-23583 · Acronis · Acronis Cyber Protect 17

Theelgo64 · Published 2026-03-05 · Updated 2026-03-12 · CVE-2026-28709

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 (Linux, Windows) versions prior to build 41186

Description The software is susceptible to unauthorized resource manipulation due to inadequate authorization checks. This allows for potential compromise of system resources.

Recommendations Update Acronis Cyber Protect 17 (Linux, Windows) to build 41186 or later.

Fix

LPE

RCE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-28709

Affected Products

Acronis Cyber Protect 17

References · 8

• https://security-advisory.acronis.com/advisories/SEC-5889 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28709 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28709 · Security Note
• https://twitter.com/VulmonFeeds/status/2029843186097467857 · Twitter Post
• https://t.me/CVEtracker/46514 · Telegram Post
• https://t.me/cveNotify/155330 · Telegram Post
• https://t.me/cveNotify/154447 · Telegram Post
• https://twitter.com/dailycve/status/2032239744847929501 · Twitter Post