CVE-2026-41220 | Acronis DeviceLock DLP/Cyber Protect Cloud Agent on Windows out-of-bounds write

A vulnerability marked as critical has been reported in Acronis DeviceLock DLP and Cyber Protect Cloud Agent on Windows. Affected is an unknown function. The manipulation leads to out-of-bounds write.

This vulnerability is documented as CVE-2026-41220. The attack needs to be performed locally. There is not any exploit available.

It is suggested to upgrade the affected component.