PT-2026-23590 · Acronis · Acronis Cyber Protect

CVE-2026-28716 · Published 2026-03-05 · Updated 2026-03-12

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186

Description The software suffers from an information disclosure and manipulation issue stemming from inadequate authorization checks. This allows for unauthorized access to information and potential modification of data.

Recommendations Update Acronis Cyber Protect to build 41186 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-28716

Affected Products

Acronis Cyber Protect

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-28716 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28716 · Vendor Advisory
• https://security-advisory.acronis.com/advisories/SEC-3687 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2029825267372269592 · Twitter Post
• https://t.me/cveNotify/155304 · Telegram Post
• https://t.me/CVEtracker/46521 · Telegram Post