CVE-2026-28721Disclosure(acronis / cyber_protect)

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

acronis CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security-advisory.acronis.com/advisories/SEC-8445

Weakness type (CWE)

CWE-610

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

cyber_protect
windows

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-03-06); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

acronis microsoft

Products

cyber_protectwindows

1 version affected across 2 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-06	3	Disclosure2General1
2026-03-09	1	Disclosure1

Full discourse4 posts

Vulmon Vulnerability Feed@VulmonFeeds218d
Disclosure
CVE-2026-28721 Local Privilege Escalation in Acronis Cyber Protect 17 (Windows) Before Build 41186 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28721
Post summary
A local privilege escalation vulnerability (CVE-2026-28721) affecting Acronis Cyber Protect 17 before Build 41186 has been disclosed, with technical details available via the provided Vulmon link.
1000047
4.0K followersView on X
CERT-PY@CERTpy215d
Disclosure
⚠️ Vulnerabilidades en productos Acronis ❗ CVE-2026-28727 ❗ CVE-2026-28721 ❗ CVE-2026-28710 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-acronis/ https://t.co/J5td6vj56o
Post summary
The tweet lists three CVEs affecting Acronis products and directs readers to a link for additional information, but provides no further details on exploitation, patches, or technical aspects.
00000145
6.6K followersView on X
CVE@CVEnew218d
Disclosure
CVE-2026-28721 Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. https://www.cve.org/CVERecord?id=CVE-2026-28721
Post summary
The text discloses CVE-2026-28721, a local privilege escalation flaw in Acronis Cyber Protect 17 due to soft link handling, providing technical details but no evidence of active exploitation or patch.
00000145
56.6K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash219d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28721 - Acronis Cyber Protect Privilege Escalation Vulnerability Intel Report: https://ift.tt/jS610Jv
Post summary
The alert identifies CVE-2026-28721 as an Acronis Cyber Protect privilege escalation vulnerability but lacks PoC, exploit details, active exploitation evidence, or patch information.
0000053
343 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	acronis	cyber_protect	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard acronis CVEs microsoft CVEs cyber_protect vulnerabilities

What researchers are saying

CVE-2026-28721

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A local privilege escalation vulnerability (CVE-2026-28721) affecting Acronis Cyber Protect 17 before Build 41186 has been disclosed, with technical details available via the provided Vulmon link.

CERT-PY@CERTpyDisclosure

The tweet lists three CVEs affecting Acronis products and directs readers to a link for additional information, but provides no further details on exploitation, patches, or technical aspects.

CVE@CVEnewDisclosure

The text discloses CVE-2026-28721, a local privilege escalation flaw in Acronis Cyber Protect 17 due to soft link handling, providing technical details but no evidence of active exploitation or patch.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashGeneral

The alert identifies CVE-2026-28721 as an Acronis Cyber Protect privilege escalation vulnerability but lacks PoC, exploit details, active exploitation evidence, or patch information.