CVE-2026-87103: High severity Acronis Cyber Protect 17 vulnerability
Published Oct 28, 2026
·Updated
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Affected Software
1 affected component
Acronis Cyber Protect 17<42587
Event History
Oct 28, 2026
CVE Published
via MITRE·10:08 AM
Data Sourced
via MITRE·10:08 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Acronis Cyber Protect 17 deployments on Linux or Windows are affected if they are running a build earlier than 42587.
2
Does exploitation require authentication or user interaction?
The supplied vector indicates that an attacker does not need privileges or user interaction, but exploitation has high attack complexity and is network-accessible.
3
What security impact can successful exploitation have?
Successful exploitation can disclose sensitive information and allow manipulation of information. The provided impact vector rates confidentiality and integrity impact as high, with no availability impact indicated.