Sensitive Information Disclosure in Acronis Cyber Protect by Acronis
CVE-2026-87103

7.4HIGH

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect 17
Vendor
CVE Published:
28 October 2026

What is CVE-2026-87103?

A vulnerability exists in Acronis Cyber Protect which allows for sensitive information to be disclosed and potentially manipulated due to improper token validation. This could lead to unauthorized access to critical data if exploited. Affected versions include Acronis Cyber Protect 17 on both Linux and Windows platforms prior to build 42587. It is crucial for users to promptly update their software to mitigate this risk and safeguard their data.

Affected Version(s)

Acronis Cyber Protect 17 Linux < 42587

References

https://security-advisory.acronis.com/advisories/SEC-9814
vendor-advisory

CVSS V3.0

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.