CVE-2026-87096
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.
Risk Assessment
Unauthorized access could lead to data leakage and modification, posing a serious threat to the confidentiality and integrity of the infrastructure.
Recommendation
Update Acronis Cyber Infrastructure to the latest version (build 6.0.1-112, 6.1.1-64, 6.2.1-71 or later).
Other vulnerabilities in Acronis Cyber Infrastructure
See all- CVE-2026-87095Critical
Acronis Cyber Infrastructure (ACI) before builds 6.0.1-112, 6.1.1-64, and 6.2.1-71 has improper authorization checks, leading to sensitive information disclosure and manipulation.
- CVE-2023-45249CriticalActively exploited
Remote command execution due to use of default passwords in Acronis Cyber Infrastructure. Affects versions before builds 5.0.1-61, 5.1.1-71, 5.2.1-69, 5.3.1-53, and 5.4.4-132.
Original NVD description (English source)
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS