CVE-2026-28710
Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.1
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.41%
- CWE
- CWE-1390
- Published
- 2026-03-05
- Last modified
- 2026-03-12
Affected products
- Acronis Acronis Cyber Protect 17
Weakness type
Related vulnerabilities
- CVE-2026-77483 — SQL Server Elevation of Privilege Vulnerability
- CVE-2026-73025 — Windows iSCSI Security Feature Bypass Vulnerability
- CVE-2026-62895 — Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
- CVE-2026-80219 — Hawtio-operator: hawtio-operator: oauthclient created with grantmethod auto and no secret enables oauth token theft
- CVE-2026-73819 — Ebyte NA111-M Weak Authentication
- CVE-2026-44476 — Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret
- CVE-2026-65098 — NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an...
- CVE-2026-68067 — Mira Hormone Monitor, Mira Android App Weak Authentication