CVE-2026-28718

Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

Scoring

Severity

MEDIUM

CVSS base score

5.3

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS probability

0.34%

CWE

CWE-779

Published

2026-03-05

Last modified

2026-03-16

Affected products

• Acronis Acronis Cyber Protect 17

Weakness type

• CWE-779

Related vulnerabilities

• CVE-2026-86200 — PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT
• CVE-2026-20210 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
• CVE-2026-20209 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
• CVE-2025-69230 — AIOHTTP Vulnerable to Cookie Parser Warning Storm
• CVE-2025-8696 — DoS attack against the Stork UI from an unauthenticated user
• CVE-2025-53636 — Open OnDemand Shell App closed websocket DoS
• CVE-2024-55628 — Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
• CVE-2024-36416 — SuiteCRM v4 API Excessive log data DOS

Markdown version · Browse all CVEs