Skip to main content

Cyber Protect CVE-2026-28726

MEDIUM
Incorrect Authorization (CWE-863)
2026-03-06 security@acronis.com
Information Disclosure Authentication Bypass Cyber Protect Windows
4.3
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 22:06 vuln.today
CVE Published
Mar 06, 2026 - 00:16 nvd
MEDIUM 4.3

DescriptionCVE.org

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

AnalysisAI

Improper access control in Acronis Cyber Protect 17 (Linux and Windows) prior to build 41186 allows authenticated users to view sensitive information they should not have access to. The vulnerability requires valid credentials and network access but does not enable data modification or system availability impacts. No patch is currently available for this medium-severity disclosure risk.

Technical ContextAI

Classified as CWE-863 (Incorrect Authorization). Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Cyber Protect

View all
CVE-2025-30412 CRITICAL
10.0 Feb 20

Second improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30411 CRITICAL
10.0 Feb 20

Improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30416 CRITICAL
10.0 Feb 20

Missing authorization in Acronis Cyber Protect 16 allows sensitive data access. CVSS 10.0.
CVE-2026-28710 CRITICAL
9.8 Mar 06

Improper authentication in Acronis Cyber Protect 17.
CVE-2024-49388 CRITICAL
9.1 Oct 15

Sensitive information manipulation due to improper authorization. Rated critical severity (CVSS 9.1), this vulnerability
CVE-2023-44206 CRITICAL
9.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated critical severity (CVSS 9.1), thi
CVE-2023-44152 CRITICAL
9.1 Sep 27

Sensitive information disclosure and manipulation due to improper authentication. Rated critical severity (CVSS 9.1), th
CVE-2023-44154 HIGH
8.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated high severity (CVSS 8.1), this vu
CVE-2023-41743 HIGH
7.8 Aug 31

Local privilege escalation due to insecure driver communication port permissions. Rated high severity (CVSS 7.8), this v
CVE-2023-44157 HIGH
7.8 Sep 27

Local privilege escalation due to insecure folder permissions. Rated high severity (CVSS 7.8), this vulnerability is low
CVE-2023-41744 HIGH
7.8 Aug 31

Local privilege escalation due to unrestricted loading of unsigned libraries. Rated high severity (CVSS 7.8), this vulne
CVE-2021-44198 HIGH
7.8 Nov 29

DLL hijacking could lead to local privilege escalation. Rated high severity (CVSS 7.8), this vulnerability is no authent

Same weakness CWE-863 – Incorrect Authorization

View all
CVE-2025-54253 CRITICAL POC
10.0
CVE-2025-24200 MEDIUM
6.1
CVE-2025-21480 HIGH
8.6
CVE-2025-21479 HIGH
8.6
CVE-2017-4915 HIGH POC
7.8
CVE-2024-6782 CRITICAL POC
9.8
CVE-2024-38856 CRITICAL POC
9.8
CVE-2023-22518 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2026-28726 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy