CVE-2026-87095: Critical severity Acronis Cyber Infrastructure vulnerability
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.
Affected Software
Event History
Frequently Asked Questions
Which Acronis Cyber Infrastructure deployments are affected?
Affected deployments are Acronis Cyber Infrastructure builds earlier than 6.0.1-112, 6.1.1-64, or 6.2.1-71, depending on the release branch in use.
Can this be exploited remotely without authentication or user interaction?
Yes. The CVSS vector indicates network-based exploitation with low attack complexity, no required privileges, and no user interaction.
What is the potential impact if exploited?
The issue can lead to disclosure and manipulation of sensitive information. The severity vector rates confidentiality and integrity impact as high, with no availability impact indicated.