CVE-2026-33092

HIGH 7.8

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

3th

Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.

CWE	CWE-15
Vendor	acronis
Product	acronis true image oem
Published	Apr 10, 2026
Last Updated	Apr 14, 2026

Stay Ahead of the Next One

Get instant alerts for acronis acronis true image oem

Be the first to know when new high vulnerabilities affecting acronis acronis true image oem are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Versions

Acronis / Acronis True Image OEM

unspecified < 42571

Acronis / Acronis True Image

unspecified < 42902

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security-advisory.acronis.com: https://security-advisory.acronis.com/advisories/SEC-9407

Credits

@aiqitut (https://hackerone.com/aiqitut)