CVE-2026-87095
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Acronis Cyber Infrastructure (ACI) before builds 6.0.1-112, 6.1.1-64, and 6.2.1-71 has improper authorization checks, leading to sensitive information disclosure and manipulation.
Risk Assessment
Unauthorized access could result in leakage or modification of sensitive data, compromising confidentiality and integrity.
Recommendation
Update Acronis Cyber Infrastructure to build 6.0.1-112, 6.1.1-64, or 6.2.1-71 (or later) and review logs for unauthorized access.
Other vulnerabilities in Acronis Cyber Infrastructure
See all- CVE-2023-45249CriticalActively exploited
Remote command execution due to use of default passwords in Acronis Cyber Infrastructure. Affects versions before builds 5.0.1-61, 5.1.1-71, 5.2.1-69, 5.3.1-53, and 5.4.4-132.
- CVE-2026-87096Low
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.
Original NVD description (English source)
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS