Live › vulnerability › CVE-2026-87099
Go to dashboardAcronis Cyber Protect 17 on Linux and Windows does not properly validate some input, which allows cross-site scripting. An attacker who gets a victim to load a crafted page or link could run script in the victim's browser session within the product.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 11:32 UTC. All times on this page are UTC.
Teams running Acronis Cyber Protect 17 builds before on Linux or Windows. The sources do not say which input fields or configurations are involved, so unknown whether exposure depends on specific settings.
42587No product ranges from the sources yet.
42587 or later on Linux and Windows.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
This page as .md · .json · in your agent: get_signal("CVE-2026-87099")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.