CVE-2026-28724

MEDIUM 4.3CVE-2026-28724 · Published 06/03/2026 · updated 17/06/2026

In short

CVE-2026-28724 is a MEDIUM (CVSS 4.3) vulnerability affecting cyber protect (acronis).
Chance of exploitation in the next 30 days (EPSS): 0.19%, higher than 8.5% of all vulnerabilities.
Fix: update to 17.0.41186 or later.

Package	Affected versions	Patched versions
cyber protect acronis	`< 17.0.41186`	`17.0.41186`

Description

Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

References

security-advisory.acronis.com/advisories/SEC-8493 · Vendor Advisory

More vulnerabilities in cyber protect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cyber protect

acronis

< 17.0.41186

17.0.41186

More vulnerabilities in cyber protect

See all →