Sensitive Information Disclosure in Acronis Cyber Protect by Acronis
CVE-2026-87880

6.8MEDIUM

Key Information:

Vendor

Acronis
Status
Acronis Cyber Protect 17
Vendor
CVE Published:
28 October 2026

What is CVE-2026-87880?

Acronis Cyber Protect 17 is susceptible to a vulnerability that leads to the disclosure of sensitive information due to inadequate SSL certificate verification. This issue affects both Linux and Windows versions prior to build 42587, potentially exposing sensitive data to unauthorized access. Users are encouraged to update to the latest versions to mitigate this risk and ensure robust security measures are in place.

Affected Version(s)

Acronis Cyber Protect 17 Linux < 42587

References

https://security-advisory.acronis.com/advisories/SEC-10681
vendor-advisory

CVSS V3.0

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.