CVE-2026-28725

MEDIUM 5.5CVE-2026-28725 · Published 06/03/2026 · updated 17/06/2026

In short

CVE-2026-28725 is a MEDIUM (CVSS 5.5) vulnerability affecting cyber protect (acronis).
Chance of exploitation in the next 30 days (EPSS): 0.13%, higher than 2.4% of all vulnerabilities.
Fix: update to 17.0.41186 or later.

Package	Affected versions	Patched versions
cyber protect acronis	`< 17.0.41186`	`17.0.41186`

Description

Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

References

security-advisory.acronis.com/advisories/SEC-8695 · Vendor Advisory

More vulnerabilities in cyber protect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cyber protect

acronis

< 17.0.41186

17.0.41186

More vulnerabilities in cyber protect

See all →