This vulnerability (CVE-2026-44682) involves DLL hijacking in Acronis DeviceLock DLP on Windows platforms prior to build 9.0.15051.93227. DLL hijacking can allow a local attacker to load a malicious DLL in place of a legitimate one, resulting in privilege escalation. The CVSS vector indicates the attack requires local access with low complexity and user interaction, but can lead to high confidentiality, integrity, and availability impacts. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow a local attacker to escalate privileges on the affected system, potentially gaining higher-level access than originally permitted. This could compromise system confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local user access and monitor for suspicious activity related to DLL loading. Avoid running untrusted code with elevated privileges.