CVE-2025-11178

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-30 · updated 2026-06-17
Weakness: CWE-427

Description

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) before build 42679, Acronis True Image OEM (Windows) before build 42575.

Affected products

Acronis True Image for SanDisk: before 42679 — fixed in 42679
Acronis True Image for Western Digital: before 42636 — fixed in 42636
Acronis True Image OEM: before 42575 — fixed in 42575
Acronis True Image: before 42386 — fixed in 42386

How to fix

Upgrade to a fixed version: Acronis True Image for SanDisk 42679; Acronis True Image for Western Digital 42636; Acronis True Image OEM 42575; Acronis True Image 42386. Check the vendor advisory for mitigations.

References

https://security-advisory.acronis.com/advisories/SEC-7078

Get alerted when CVE-2025-11178 or the next vulnerability affects your stack