PT-2026-35925 · Acronis · Devicelock Dlp+1

Kolja Grassmann · Published 2026-04-29 · Updated 2026-04-29 · CVE-2026-41220

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis DeviceLock DLP (Windows) versions prior to 9.0.93212 Acronis Cyber Protect Cloud Agent (Windows) versions prior to 42183

Description Local privilege escalation occurs due to improper input validation, which is a failure of the application to correctly verify the data it receives, potentially allowing an attacker to gain higher permissions on the system.

Recommendations Update Acronis DeviceLock DLP (Windows) to build 9.0.93212 or later. Update Acronis Cyber Protect Cloud Agent (Windows) to build 42183 or later.

Fix

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-41220

Affected Products

Cyber Protect Cloud Agent

Devicelock Dlp

References · 4

• https://security-advisory.acronis.com/advisories/SEC-10296 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41220 · Security Note
• https://twitter.com/CVEnew/status/2049578408439615880 · Twitter Post
• https://twitter.com/infoflowcloud/status/2049579802995106285 · Twitter Post