All vulnerabilities
CVE-2026-87096

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber In

Acronis Acronis Cyber Infrastructure
Open in ThreatlineRecord JSON
CVSS
3.3Low
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.13%Chance of exploitation activity in the next 30 days, higher than 2% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in6.0.1-112Also 6.1.1-64, 6.2.1-71CVE List
Published21 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 6.0.1-112Acronis Cyber InfrastructureCVE List
  • 6.1.1-64Acronis Cyber InfrastructureCVE List
  • 6.2.1-71Acronis Cyber InfrastructureCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

Text from CVE List

Affected versions 3

  • Acronis Cyber Infrastructureaffected: unspecified before 6.0.1-112CVE List
  • Acronis Cyber Infrastructureaffected: unspecified before 6.1.1-64CVE List
  • Acronis Cyber Infrastructureaffected: unspecified before 6.2.1-71CVE List

References 1