← Back

CVE-2026-28718

nvd nist
Published: Mar 6, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.

Affected (1)

Acronis
1 product
Cyber Protect
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Cyber Protect
Before 17.0.41186
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-779
Logging of Excessive Data
The product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack.

References (1)

Source: security@acronis.com
Vendor Advisory

Timeline

No history available yet.