CVE-2026-28728

MediumCVSS 6.7

Published: 02/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Local privilege escalation vulnerability due to DLL hijacking in Acronis True Image (Windows) before build 42902.

A local attacker can exploit DLL hijacking to gain elevated privileges, potentially leading to full system compromise.

Update Acronis True Image (Windows) to build 42902 or later where the vulnerability is fixed.

Original NVD description (English source)

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902.