CVE-2026-87102: High severity Acronis Cyber Protect 17 vulnerability

Q: Which deployments are affected?

Acronis Cyber Protect 17 installations on Linux or Windows are affected if they are running a build earlier than 42587.

Q: Does exploitation require authentication or user interaction?

The vector indicates network exploitation with no privileges or user interaction required. Exploitation complexity is rated high, so successful exploitation requires conditions or effort beyond a straightforward request.

Q: What is the security impact if exploited?

The issue can allow sensitive information disclosure and manipulation. The supplied metrics rate confidentiality and integrity impact as high, with no availability impact indicated.

Published Oct 28, 2026

Updated

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

Affected Software

1 affected component

Acronis Cyber Protect 17<42587

Event History

Oct 28, 2026

CVE Published

via MITRE·10:11 AM

Data Sourced

via MITRE·10:11 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Acronis Cyber Protect 17 installations on Linux or Windows are affected if they are running a build earlier than 42587.

Does exploitation require authentication or user interaction?

The vector indicates network exploitation with no privileges or user interaction required. Exploitation complexity is rated high, so successful exploitation requires conditions or effort beyond a straightforward request.

What is the security impact if exploited?