Sensitive Information Disclosure in Acronis Cyber Protect
CVE-2026-87097

5.3MEDIUM

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect 17
Vendor
CVE Published:
28 October 2026

What is CVE-2026-87097?

Acronis Cyber Protect 17 is vulnerable to sensitive information disclosure due to insufficiently secured credentials. This flaw can expose sensitive data to unauthorized users, compromising the integrity of the system and its users. Users are encouraged to update to build 42587 or later to mitigate this vulnerability and enhance data protection.

Affected Version(s)

Acronis Cyber Protect 17 Linux < 42587

References

https://security-advisory.acronis.com/advisories/SEC-5613
vendor-advisory

CVSS V3.0

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.