CVE-2026-25852
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.
Risk Assessment
A local attacker could exploit DLL hijacking to escalate privileges on a machine with Acronis DeviceLock DLP installed. This could lead to obtaining higher privileges on the system.
Recommendation
Update Acronis DeviceLock DLP (Windows) to build 9.0.93212 or later. Until then, restrict write access to directories used for DLL loading.
Other vulnerabilities in Acronis DeviceLock DLP
See all- CVE-2026-50033High
Acronis DeviceLock DLP for Windows prior to build 9.0.15051.93227 is vulnerable to local privilege escalation via DLL hijacking.
- CVE-2026-44682High
Local privilege escalation due to DLL hijacking vulnerability. Affects Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
- CVE-2026-44609High
Local privilege escalation due to EXE hijacking vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
- CVE-2026-42061High
A vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227 allows local privilege escalation due to excessive permissions assigned to child processes.
Original NVD description (English source)
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS