CVE-2026-28728
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Local privilege escalation vulnerability due to DLL hijacking in Acronis True Image (Windows) before build 42902.
Risk Assessment
A local attacker can exploit DLL hijacking to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Update Acronis True Image (Windows) to build 42902 or later where the vulnerability is fixed.
Other vulnerabilities in Acronis True Image
See all- CVE-2017-3219High
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.
- CVE-2026-33271Medium
Acronis True Image for Windows before build 42902 has a local privilege escalation vulnerability due to insecure folder permissions.
- CVE-2026-27774Medium
Local privilege escalation vulnerability due to DLL hijacking. Affects Acronis True Image for Windows before build 42902.
Original NVD description (English source)
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS