PT-2026-23584 · Acronis · Acronis Cyber Protect 17

CVE-2026-28710 · Published 2026-03-05 · Updated 2026-03-12

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 (Linux, Windows) versions prior to build 41186

Description The software suffers from a flaw related to improper authentication, leading to potential sensitive information disclosure and manipulation. The issue allows for privilege escalation.

Recommendations Update Acronis Cyber Protect 17 (Linux, Windows) to build 41186 or later.

Fix

LPE

Weakness Enumeration

CWE-1390

Related Identifiers

CVE-2026-28710

Affected Products

Acronis Cyber Protect 17

References · 7

• https://osv.dev/vulnerability/CVE-2026-28710 · Vendor Advisory
• https://security-advisory.acronis.com/advisories/SEC-9137 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28710 · Security Note
• https://t.me/cveNotify/155331 · Telegram Post
• https://twitter.com/TheHackerWire/status/2029879546540118326 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2029840626192109692 · Twitter Post
• https://t.me/CVEtracker/46515 · Telegram Post