PT-2026-35925 · Acronis · Acronis Cyber Protect Cloud Agent+1

Kolja Grassmann · Published 2026-04-29 · Updated 2026-04-29 · CVE-2026-41220

NVD

CVSS v3.1

7.8

High

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-41220

Affected Products

Acronis Cyber Protect Cloud Agent

Acronis Devicelock Dlp

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-41220 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-10296 · Vendor Advisory