CVE-2026-28713Disclosure(acronis / agent)

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

acronis CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security-advisory.acronis.com/advisories/SEC-4168

Weakness type (CWE)

CWE-1392

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

agent
cyber_protect

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

acronis

Products

agentcyber_protect

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew216d
Disclosure
CVE-2026-28713 Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 3… https://www.cve.org/CVERecord?id=CVE-2026-28713
Post summary
CVE-2026-28713 reveals that a virtual appliance of Acronis Cyber Protect Cloud Agent uses default credentials granting local privileged access, affecting builds before 3, with no mention of PoC, exploitation, or remediation.
00000156
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds216d
General
CVE-2026-28713 Acronis Cyber Protect Cloud Agent and 17 VMware Appliance Default Credentials Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28713
Post summary
The post announces CVE-2026-28713 as a default‑credentials issue in Acronis Cyber Protect Cloud Agent and VMware Appliance, but provides no further technical or exploitation details.
0000045
4.0K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	acronis	agent	-	-	-
App	acronis	cyber_protect	-	-	-

Explore more

Back to dashboard acronis CVEs agent vulnerabilities