CVE-2026-27774
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Local privilege escalation vulnerability due to DLL hijacking. Affects Acronis True Image for Windows before build 42902.
Risk Assessment
An attacker with local access can escalate privileges, potentially leading to full system compromise.
Recommendation
Update Acronis True Image to build 42902 or later.
Other vulnerabilities in Acronis True Image
See all- CVE-2017-3219High
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.
- CVE-2026-33271Medium
Acronis True Image for Windows before build 42902 has a local privilege escalation vulnerability due to insecure folder permissions.
- CVE-2026-28728Medium
Local privilege escalation vulnerability due to DLL hijacking in Acronis True Image (Windows) before build 42902.
Original NVD description (English source)
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS