CVE-2026-44609 is a local privilege escalation vulnerability in Acronis DeviceLock DLP (Windows) caused by executable hijacking (CWE-427). This flaw allows a local attacker with limited privileges to execute malicious code with elevated privileges by exploiting the way the product loads executables. The affected versions are those prior to build 9.0.15051.93227. The vulnerability has a CVSS 3.0 base score of 7.3, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow a local attacker to escalate privileges, potentially gaining full control over the affected system. This could lead to unauthorized access to sensitive data, modification of system configurations, and disruption of system availability. The high CVSS score reflects significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to executable hijacking. Avoid running untrusted code with elevated privileges on affected systems.