CVE-2026-41220: Acronis Cyber Protect Cloud Agent

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

Affected products

• Acronis Acronis Cyber Protect Cloud Agent: before 42183 (fixed in 42183)
• Acronis Acronis Devicelock Dlp: before 9.0.93212 (fixed in 9.0.93212)

Published 2026-04-29. Last modified 2026-06-17.