Sensitive Information Disclosure in Acronis Cyber Infrastructure
CVE-2026-87096

3.3LOW

Key Information:

Vendor

Acronis
Status
Acronis Cyber Infrastructure
Vendor
CVE Published:
21 October 2026

What is CVE-2026-87096?

This vulnerability in Acronis Cyber Infrastructure arises from inadequate authorization checks, leading to the potential exposure and manipulation of sensitive information. Versions of the product prior to specific builds allow unauthorized access to user data, creating significant security risks for affected users. It is crucial to implement the software updates provided by Acronis to mitigate these vulnerabilities and maintain data integrity.

Affected Version(s)

Acronis Cyber Infrastructure ACI < 6.0.1-112

Acronis Cyber Infrastructure ACI < 6.1.1-64

Acronis Cyber Infrastructure ACI < 6.2.1-71

References

https://security-advisory.acronis.com/advisories/SEC-8129
vendor-advisory

CVSS V3.0

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.