Sensitive Information Disclosure in Acronis Cyber Protect by Acronis
CVE-2026-28710

8.1HIGH

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect 17
Vendor
CVE Published:
5 March 2026

What is CVE-2026-28710?

Acronis Cyber Protect is susceptible to a security flaw that allows unauthorized access to sensitive information. This vulnerability arises from improper authentication mechanisms, leading to potential data manipulation. Effective versions include builds released after 41186 for both Linux and Windows systems, which mitigate this risk.

Affected Version(s)

Acronis Cyber Protect 17 Linux < 41186

References

https://security-advisory.acronis.com/advisories/SEC-9137
vendor-advisory

CVSS V3.0

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.