CVE-2026-33271 - Local privilege escalation due to insecure folder permissions

Back Back to CVE browser

MEDIUM

Local privilege escalation due to insecure folder permissions

Published Apr 2, 2026

6.7

MEDIUM

CVSS 3.0

EPSS 0.12%

Description

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.

Affected products

Vendor Acronis Product Acronis True Image Default
unaffected
- Version
  unspecified
  Status
  affected
  Constraints
  <42902

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Acronis

Acronis True Image

unaffected

Version	Status	Constraints
unspecified	affected	<42902

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (1)

https://security-advisory.acronis.com/advisories/SEC-9108
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://security-advisory.acronis.com/advisories/SEC-9108		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Acronis

Published Apr 2, 2026

Updated Apr 3, 2026

Reserved Apr 1, 2026

Link CVE-2026-33271

CISA Vulnrichment

Updated Apr 2, 2026

NVD

Status Analyzed

Modified Jul 24, 2026

Link CVE-2026-33271

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-33271

ENISA EUVD

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a