CVE-2026-28718
High · 7.5CVSS
7.5
EPSS
0.7%
Published
Mar 6, 2026
CISA due date
—
The record
Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-20210 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage… CWE-779
- CVE-2026-20209 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage… CWE-779
- GHSA-xp4f-g2cm-rhg7 PocketMine-MP has LogDoS by many junk properties in client data JWT in LoginPacket CWE-779
- CVE-2025-69230 AIOHTTP Vulnerable to Cookie Parser Warning Storm CWE-779