CVE Vulnerabilities

CVE-2026-28722

Externally Controlled Reference to a Resource in Another Sphere

Published: Mar 06, 2026 | Modified: Mar 11, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

Weakness

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

Affected Software

NameVendorStart VersionEnd Version
Cyber_protectAcronis*17.0.41186 (excluding)

References