CVE-2026-33271
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Acronis True Image for Windows before build 42902 has a local privilege escalation vulnerability due to insecure folder permissions.
Risk Assessment
The organization is at risk that an unprivileged local user may gain elevated privileges, potentially leading to full system compromise.
Recommendation
Update Acronis True Image to build 42902 or later, which fixes this vulnerability.
Other vulnerabilities in Acronis True Image
See all- CVE-2017-3219High
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.
- CVE-2026-28728Medium
Local privilege escalation vulnerability due to DLL hijacking in Acronis True Image (Windows) before build 42902.
- CVE-2026-27774Medium
Local privilege escalation vulnerability due to DLL hijacking. Affects Acronis True Image for Windows before build 42902.
Original NVD description (English source)
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS