{"id":"CVE-2026-87098","kind":"vulnerability","aliases":["CVE-2026-87098"],"related":[],"title":"Acronis Cyber Protect 17: improper authorization leaks sensitive information","description":"Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.","summary":"Acronis Cyber Protect 17 on Linux and Windows, before build 42587, has an improper authorization flaw that exposes sensitive information. The sources do not say which data is exposed or what access an attacker needs.","severity":"low","cvss":3.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["acronis-cyber-protect","linux","other","windows"],"not_affected_if":[],"how_to_check":"- Check the installed Acronis Cyber Protect 17 build number in the product's About screen or version settings; unknown if the sources give another method.","fix":"- Update Acronis Cyber Protect 17 to build `42587` or later; unknown if the sources name a different fixed build.","status":"open","published_at":"2026-10-28T11:17:27+00:00","first_seen_at":"2026-10-28T11:32:33+00:00","triaged_at":"2026-10-28T11:33:42+00:00","updated_at":"2026-10-28T11:33:42+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-28T11:33:42Z","model":"claude-haiku-5-5","output":{"fix":"- Update Acronis Cyber Protect 17 to build `42587` or later; unknown if the sources name a different fixed build.","reach":"unknown","title":"Acronis Cyber Protect 17: improper authorization leaks sensitive information","impact":"low","summary":"Acronis Cyber Protect 17 on Linux and Windows, before build 42587, has an improper authorization flaw that exposes sensitive information. The sources do not say which data is exposed or what access an attacker needs.","category":"other","nicknames":[],"who_cares":["acronis-cyber-protect","windows","linux"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Sensitive information readable by unauthorized parties","analyst_note":"Check the NVD entry and the Acronis security advisory for the exposed data, required privileges and the fixed build details.","how_to_check":"- Check the installed Acronis Cyber Protect 17 build number in the product's About screen or version settings; unknown if the sources give another method.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organisations running Acronis Cyber Protect 17 on Linux or Windows at a build before `42587` are affected. The sources do not describe the exact configuration or role needed to reach the data, so unknown for who can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000569,"input_tokens":3250,"output_tokens":488,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-87098':12A,15A '17':4A,26B,73C '42587':33B,78C 'access':54B 'acroni':1A,17B,23B,70C 'acronis-cyber-protect':16B 'affect':69C 'attack':56B 'author':6A,37B,64C 'build':32B,77C 'cve':10A,13A 'cyber':2A,18B,24B,71C 'data':49B 'disclosur':60C 'due':61C 'expos':40B,51B 'flaw':38B 'follow':66C 'improp':5A,36B,63C 'inform':9A,42B,59C 'leak':7A 'linux':20B,28B,74C 'need':57B 'product':67C 'protect':3A,19B,25B,72C 'say':47B 'sensit':8A,41B,58C 'sourc':44B 'window':22B,30B,75C","nicknames":[],"mitigations":[],"who_affected":"Organisations running Acronis Cyber Protect 17 on Linux or Windows at a build before `42587` are affected. The sources do not describe the exact configuration or role needed to reach the data, so unknown for who can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:27+00:00","kev":null,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security@acronis.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-87098","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87098","severity":null,"published_at":"2026-10-28T11:17:27+00:00","modified_at":"2026-10-28T11:17:27+00:00","first_seen_at":"2026-10-28T11:32:33+00:00","fetched_at":"2026-10-28T11:32:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}