Sensitive Information Disclosure in Acronis Cyber Protect by Acronis
CVE-2026-87879

5.9MEDIUM

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect 17
Vendor
CVE Published:
28 October 2026

What is CVE-2026-87879?

A vulnerability has been identified in Acronis Cyber Protect 17, where improper validation of tokens may lead to the unintentional disclosure of sensitive information. This affects various operating systems, including Linux and Windows, for versions prior to build 42587. It is crucial for users to update their software to mitigate potential exploitation and ensure the security of their data.

Affected Version(s)

Acronis Cyber Protect 17 Linux < 42587

References

https://security-advisory.acronis.com/advisories/SEC-10289
vendor-advisory

CVSS V3.0

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.