Live › vulnerability › CVE-2026-87095
Go to dashboardAcronis Cyber Infrastructure has an incorrect authorization check (CWE-863). An unauthenticated attacker with network access can read sensitive data and modify data (CVSS 9.1: confidentiality and integrity high, availability none). Acronis does not say which component or endpoint is affected. No exploitation or public PoC is known.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Acronis Cyber Infrastructure | vendor | < 6.0.1-112 (6.0.x); < 6.1.1-64 (6.1.x); < 6.2.1-71 (6.2.x) | 6.0.1-112, 6.1.1-64, 6.2.1-71 |
6.0.1-112, 6.1.x below 6.1.1-64, 6.2.x below 6.2.1-716.0.1-112, 6.1.1-64 or 6.2.1-71 or later for your branchEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.
This page as .md · .json · in your agent: get_signal("CVE-2026-87095")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.