Information Disclosure in Acronis Cyber Protect by Acronis
CVE-2026-28716

4.4MEDIUM

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect 17
Vendor
CVE Published:
5 March 2026

What is CVE-2026-28716?

The vulnerability arises from inadequate authorization checks in Acronis Cyber Protect 17, which allows attackers to potentially disclose sensitive information. This affects both Linux and Windows versions prior to build 41186, exposing users to risks from unauthorized data access and manipulation.

Affected Version(s)

Acronis Cyber Protect 17 Linux < 41186

References

https://security-advisory.acronis.com/advisories/SEC-3687
vendor-advisory

CVSS V3.0

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.