What is the CVSS score of CVE-2026-41952?

CVE-2026-41952 has a CVSS 3.0 base score of 7.8 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Acronis Devicelock Dlp are affected by CVE-2026-41952?

Acronis DeviceLock DLP and Cyber Protect Cloud Agent for Windows contain a privilege escalation vulnerability (CVE-2026-41952) enabling any local user to gain administrative control and compromise…. A patch is available.

How to fix or mitigate CVE-2026-41952?

Within 24 hours, inventory all Windows systems running Acronis DeviceLock DLP builds prior to 9.0.93212 or Cyber Protect Cloud Agent builds prior to 42183. Within 7 days, test patches in a staging environment and begin staged deployment prioritizing high-risk systems. Within 30 days, complete deployment of DeviceLock DLP 9.0.93212 or later and Cyber Protect Cloud Agent build 42183 or later across all systems, verified through vulnerability scanning.

Acronis Devicelock Dlp CVE-2026-41952

EUVD-2026-26234 HIGH

Write-what-where Condition (CWE-123)

2026-04-29 Acronis

Privilege Escalation Microsoft Acronis Devicelock Dlp Acronis Cyber Protect Cloud Agent Acronis

7.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 05:52 vuln.today

Patch released

Apr 30, 2026 - 15:48 nvd

Patch available

Apr 29, 2026 - 16:01 EUVD

EUVD ID Assigned

Apr 29, 2026 - 14:45 euvd

EUVD-2026-26234

CVE Published

Apr 29, 2026 - 13:42 nvd

HIGH 7.8

DescriptionCVE.org

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

AnalysisAI

Local privilege escalation in Acronis DeviceLock DLP (Windows, builds before 9.0.93212) and Acronis Cyber Protect Cloud Agent (Windows, builds before 42183) allows a low-privileged local user to escalate to full system control through improper input validation. Classified as CWE-123 (write-what-where condition), successful exploitation yields total compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis, and EPSS is very low (0.01%), but the SSVC technical impact is rated total.