← Back

CVE-2026-28713

nvd nist
Published: Mar 6, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Exploitability: 1.6 / Impact: 5.5
Source: security@acronis.com (Secondary)

Description

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

Affected (2)

Acronis
2 products
Agent
Cyber Protect
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Agent
Before c23.12
Cyber Protect
Before 17.0.41186

Related CWEs

CWE-1392
Use of Default Credentials
The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

References (1)

Source: security@acronis.com
Vendor Advisory

Timeline

No history available yet.