---
id: "CVE-2026-87098"
kind: "vulnerability"
aliases: ["CVE-2026-87098"]
title: "Acronis Cyber Protect 17: improper authorization leaks sensitive information"
severity: "low"
cvss: 3.1
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["acronis-cyber-protect", "linux", "other", "windows"]
not_affected_if: []
published_at: "2026-10-28T11:17:27+00:00"
first_seen_at: "2026-10-28T11:32:33+00:00"
updated_at: "2026-10-28T11:33:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87098", "first_seen_at": "2026-10-28T11:32:33+00:00"}]
---

# Acronis Cyber Protect 17: improper authorization leaks sensitive information

Acronis Cyber Protect 17 on Linux and Windows, before build 42587, has an improper authorization flaw that exposes sensitive information. The sources do not say which data is exposed or what access an attacker needs.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Acronis Cyber Protect 17 build number in the product's About screen or version settings; unknown if the sources give another method.

## Fix

- Update Acronis Cyber Protect 17 to build `42587` or later; unknown if the sources name a different fixed build.

## Timeline

- 2026-10-28T11:32:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87098

## From the sources

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_