CVE-2026-87099: XSS
Published Oct 28, 2026
·Updated
Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Affected Software
1 affected component
Acronis Cyber Protect 17<42587
Event History
Oct 28, 2026
CVE Published
via MITRE·10:10 AM
Data Sourced
via MITRE·10:10 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments need remediation?
Acronis Cyber Protect 17 on Linux or Windows is affected if it is running a build earlier than 42587.
2
What level of access and interaction does exploitation require?
The supplied vector indicates network reachability, high attack complexity, high privileges, and user interaction are required. Successful exploitation can affect confidentiality and integrity, but not availability.