---
id: "CVE-2026-87097"
kind: "vulnerability"
aliases: ["CVE-2026-87097"]
title: "Acronis Cyber Protect 17: insufficiently protected credentials expose sensitive information"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["acronis-cyber-protect", "backup", "linux", "other", "windows"]
not_affected_if: ["build-42587-or-later"]
published_at: "2026-10-28T11:17:27+00:00"
first_seen_at: "2026-10-28T11:32:33+00:00"
updated_at: "2026-10-28T11:33:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87097", "first_seen_at": "2026-10-28T11:32:33+00:00"}]
---

# Acronis Cyber Protect 17: insufficiently protected credentials expose sensitive information

Acronis Cyber Protect 17 builds before 42587 store credentials insufficiently protected, so sensitive information can be disclosed. An attacker who can read those stored credentials could reuse them against the backup and protection environment.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Acronis Cyber Protect 17 build number in the product's About dialog or console
- unknown for any other check, as the sources do not say where the credentials are stored

## Fix

- Update Acronis Cyber Protect 17 to build `42587` or later
- Rotate any credentials stored by affected agents after patching, as the sources do not say whether prior exposure occurred

## Timeline

- 2026-10-28T11:32:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87097

## From the sources

Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_