CVE-2025-11178 HIGH

CVE-2025-11178

Vendor Acronis
Product Acronis True Image
Weakness CWE-427
Published September 30, 2025
Last update April 10, 2026
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) before build 42679, Acronis True Image OEM (Windows) before build 42575.

Key dates

02Disclosure timeline

September 30, 2025 CVE published
April 10, 2026 Record updated