Live › vulnerability › CVE-2026-87096
Go to dashboardAcronis Cyber Infrastructure builds before 6.0.1-112, 6.1.1-64 and 6.2.1-71 fail to check authorization properly on some operations. An attacker can read sensitive information and change data they should not reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Acronis Cyber Infrastructure (ACI) builds older than the fixed versions for their branch. The sources do not say which interfaces or configurations are exposed, so whether a given deployment is reachable is unknown.
No product ranges from the sources yet.
6.0.1-112 or later on the 6.0 branch6.1.1-64 or later on the 6.1 branch6.2.1-71 or later on the 6.2 branchEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.
This page as .md · .json · in your agent: get_signal("CVE-2026-87096")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.