This vulnerability (CVE-2026-44609) affects Acronis DeviceLock DLP on Windows platforms prior to build 9.0.15051.93227. It is caused by executable hijacking (CWE-427), which can be leveraged by a local attacker to escalate privileges. The CVSS 3.0 vector indicates the attack requires local access with low complexity, user interaction, and results in high confidentiality, integrity, and availability impact. The vendor has not published a patch or official remediation level, and no exploits are currently known publicly.

Successful exploitation of this vulnerability could allow a local attacker to gain elevated privileges on the affected system, potentially compromising confidentiality, integrity, and availability of the system. This could lead to unauthorized access to sensitive data and control over system operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local user access to trusted individuals and monitor for suspicious activity related to executable file manipulation. Avoid running untrusted applications and consider applying application whitelisting or other endpoint protection controls to mitigate risk.