CVE-2026-87096

Awaiting Analysis Awaiting Analysis - Queue

Improper Authorization Leading to Information Disclosure in Acronis Cyber Infrastructure

Publication date: 2026-10-21

Last updated on: 2026-10-30

Assigner: Acronis International GmbH

Description

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-30

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-09

NVD

CVE-2026-87096

EUVD

EUVD-2026-107161

Affected Vendors & Products

Vendor	Product	Version / Range
Acronis	Acronis Cyber Infrastructure	unspecified
Acronis	Acronis Cyber Infrastructure	unspecified
Acronis	Acronis Cyber Infrastructure	unspecified

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability involves sensitive information disclosure and manipulation due to improper authorization checks in Acronis Cyber Infrastructure (ACI). Affected versions are before build 6.0.1-112, 6.1.1-64, and 6.2.1-71.

Impact Analysis

An attacker with high privileges could exploit this to access or alter sensitive data. The low CVSS score suggests limited impact but still poses risks to confidentiality and integrity.

Compliance Impact

The vulnerability involves sensitive information disclosure and manipulation due to improper authorization checks, which could lead to unauthorized access to confidential data. This may impact compliance with GDPR by violating data protection principles and HIPAA by exposing protected health information if such data is processed by the affected products.

Mitigation Strategies

Update Acronis Cyber Infrastructure (ACI) to a version that is not affected by this vulnerability. Specifically, upgrade to build 6.0.1-112 or later, build 6.1.1-64 or later, or build 6.2.1-71 or later depending on your current version.

Hi! I’m here to help you understand CVE-2026-87096. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...