Sensitive Information Disclosure in Acronis Cyber Protect Software
CVE-2026-87098

3.1LOW

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect 17
Vendor
CVE Published:
28 October 2026

What is CVE-2026-87098?

Acronis Cyber Protect 17 experiences a vulnerability that results in the disclosure of sensitive information. This issue arises from improper authorization mechanisms within the software. Users on versions prior to build 42587 for both Linux and Windows platforms may be at risk. It is important for users to update their installations to safeguard against unauthorized access to sensitive data.

Affected Version(s)

Acronis Cyber Protect 17 Linux < 42587

References

https://security-advisory.acronis.com/advisories/SEC-6066
vendor-advisory

CVSS V3.0

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.