EUVD-2026-21372

| CVE-2026-33092 HIGH
2026-04-10 Acronis GHSA-xr7f-6r6v-cqmm
7.8
CVSS 3.0
Share

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Apr 10, 2026 - 13:45 vuln.today
EUVD ID Assigned
Apr 10, 2026 - 13:45 euvd
EUVD-2026-21372
CVE Published
Apr 10, 2026 - 13:17 nvd
HIGH 7.8

Tags

Apple Privilege Escalation

Description

Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.

Analysis

Local privilege escalation in Acronis True Image for macOS enables authenticated low-privileged users to gain elevated system privileges through improper environment variable handling. Affects Acronis True Image OEM (macOS) versions prior to build 42571 and Acronis True Image (macOS) prior to build 42902. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Remediation

Within 24 hours: Inventory all macOS systems running Acronis True Image OEM (versions prior to build 42571) or Acronis True Image (versions prior to build 42902) using endpoint detection tools; restrict local system access for non-administrator users on affected machines. Within 7 days: Implement application-level access controls limiting True Image execution to authorized administrators only; document business-critical systems requiring this software. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Priority Score

39
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +39
POC: 0

Share

EUVD-2026-21372 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy