CVE-2026-28713: Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before…

PriorityP433high7.1CVSS 3.0

AVNACHPRNUIRSUCHIHAL

EPSS

0.17%

6.6th percentile

Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_cyber_protect_17	>= unspecified < 41186	41186
acronis	acronis_cyber_protect_cloud_agent	>= unspecified < 36943	36943
acronis	agent	< c23.12	c23.12
acronis	cyber_protect	< 17.0.41186	17.0.41186

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.