CVE-2026-28713

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud…

Acronis·CWE-1392·Published 2026-03-05

CVSS

—

EPSS

0.00

KEV

Exploits

Vendor statements (1)

security-advisory.acronis.com

cve.orgen

225 chars

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

NVDes

284 chars

Credenciales predeterminadas establecidas para el usuario privilegiado local en el Dispositivo Virtual. Los siguientes productos están afectados: Acronis Cyber Protect Cloud Agent (VMware) antes de la compilación 36943, Acronis Cyber Protect 17 (VMware) antes de la compilación 41186.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	7.1	—	—	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
3.0	Secondary	NVD	7.1	1.6	5.5	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L