PT-2026-46063 · Acronis · Devicelock Dlp

Mmg · CVE-2026-44609 · Published 2026-06-03 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis DeviceLock DLP (Windows) versions prior to 9.0.15051.93227

Description Local privilege escalation is possible due to an EXE hijacking issue. This occurs when an application searches for a required executable file in an insecure order, allowing an attacker to place a malicious executable in a higher-priority directory to be executed with elevated privileges.

Recommendations Update to build 9.0.15051.93227 or later.

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-44609

Affected Products

Devicelock Dlp

References · 5

• https://security-advisory.acronis.com/advisories/SEC-3084 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44609 · Security Note
• https://t.me/cveNotify/213318 · Telegram Post
• https://twitter.com/CVEnew/status/2062404837543928218 · Twitter Post
• https://t.me/CVEtracker/55767 · Telegram Post