CVE-2026-28713
High · 7.1CVSS
7.1
EPSS
0.3%
Published
Mar 6, 2026
CISA due date
—
The record
Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-86464 In the current development version of Eclipse aeriOS, for which no official release has… CWE-1392
- CVE-2026-65313 A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering… CWE-1392
- CVE-2026-68503 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. CWE-1392
- CVE-2026-46386 OpenProject is open-source, web-based project management software. CWE-1392
- CVE-2026-44273 Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default… CWE-1392
- CVE-2026-32652 Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials"… CWE-1392
- CVE-2026-50005 Brickcom cameras ship with default credentials that allows any unauthenticated remote… CWE-1392
- CVE-2026-9844 Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology… CWE-1392