CVE-2026-87098: Low severity Acronis Cyber Protect 17 vulnerability
Published Oct 28, 2026
·Updated
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Affected Software
1 affected component
Acronis Cyber Protect 17<42587
Event History
Oct 28, 2026
CVE Published
via MITRE·10:09 AM
Data Sourced
via MITRE·10:09 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Acronis Cyber Protect 17 installations on Linux or Windows are affected if they are running a build earlier than 42587.
2
What level of access does an attacker need?
The CVSS vector indicates that an attacker needs low-level privileges and network access. Exploitation also has high attack complexity and does not require user interaction.
3
What is the potential impact?
The issue can disclose sensitive information. The provided severity data indicates low confidentiality impact, with no integrity or availability impact.