CVE-2026-87879: Medium severity Acronis Cyber Protect 17 vulnerability
Published Oct 28, 2026
·Updated
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Affected Software
1 affected component
Acronis Cyber Protect 17<42587
Event History
Oct 28, 2026
CVE Published
via MITRE·10:12 AM
Data Sourced
via MITRE·10:12 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Acronis Cyber Protect 17 installations on Linux or Windows are affected if they are before build 42587.
2
Can this be exploited remotely without credentials or user interaction?
The provided vector indicates network-based exploitation with no privileges or user interaction required. It also indicates high attack complexity.
3
What is the likely impact of successful exploitation?
Successful exploitation may disclose sensitive information. The provided impact metrics indicate high confidentiality impact and no integrity or availability impact.