PT-2026-23596 · Acronis · Acronis Cyber Protect 17

Vultza · Published 2026-03-05 · Updated 2026-03-11 · CVE-2026-28722

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 (Windows) versions prior to build 41186

Description A local privilege escalation can occur due to improper handling of soft links. This allows an attacker with local access to potentially gain elevated privileges on the system.

Recommendations Update Acronis Cyber Protect 17 (Windows) to build 41186 or later.

Fix

LPE

Weakness Enumeration

CWE-610

Related Identifiers

CVE-2026-28722

Affected Products

Acronis Cyber Protect 17

References · 6

• https://osv.dev/vulnerability/CVE-2026-28722 · Vendor Advisory
• https://security-advisory.acronis.com/advisories/SEC-8481 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28722 · Security Note
• https://t.me/CVEtracker/46527 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2029809909173215340 · Twitter Post
• https://t.me/cveNotify/155091 · Telegram Post