EIP-2026-116714

This writeup describes an unquoted service path vulnerability in Acronis True Image OEM 19.0.5128, where the 'afcdpsrv' service could allow local privilege escalation if an attacker can place executable code in the system root path.