{"id":"CVE-2026-87102","kind":"vulnerability","aliases":["CVE-2026-87102"],"related":[],"title":"Acronis Cyber Protect 17: improper token validation leaks and alters sensitive data","description":"Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.","summary":"Acronis Cyber Protect 17 on Linux and Windows does not properly validate tokens before build 42587, per the NVD entry. An attacker who gets past that check can read sensitive information and manipulate data.","severity":"high","cvss":7.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["acronis-cyber-protect","backup","linux","other","windows"],"not_affected_if":[],"how_to_check":"- Check the installed Acronis Cyber Protect 17 build number in the product's About or version screen; unknown whether the sources give another method.","fix":"- Update Acronis Cyber Protect 17 to build `42587` or later; the sources give no further remediation steps.","status":"open","published_at":"2026-10-28T11:17:27+00:00","first_seen_at":"2026-10-28T11:32:34+00:00","triaged_at":"2026-10-28T11:33:23+00:00","updated_at":"2026-10-28T11:33:23+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-28T11:33:23Z","model":"claude-haiku-5-5","output":{"fix":"- Update Acronis Cyber Protect 17 to build `42587` or later; the sources give no further remediation steps.","reach":"unknown","title":"Acronis Cyber Protect 17: improper token validation leaks and alters sensitive data","impact":"high","summary":"Acronis Cyber Protect 17 on Linux and Windows does not properly validate tokens before build 42587, per the NVD entry. An attacker who gets past that check can read sensitive information and manipulate data.","category":"other","nicknames":[],"who_cares":["acronis-cyber-protect","windows","linux","backup"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker reads sensitive information and manipulates data","analyst_note":"Check NVD and Acronis advisories for the attack vector, auth requirement and exact fixed build; the sources give only the affected version.","how_to_check":"- Check the installed Acronis Cyber Protect 17 build number in the product's About or version screen; unknown whether the sources give another method.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running Acronis Cyber Protect 17 on Linux or Windows before build `42587`. The sources do not say which deployment roles or configurations are exposed, so unknown whether any group can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000571,"input_tokens":3260,"output_tokens":491,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-87102':15A,18A '17':4A,30B,79C '42587':42B,84C 'acroni':1A,20B,27B,76C 'acronis-cyber-protect':19B 'affect':75C 'alter':10A 'attack':48B 'backup':23B 'build':41B,83C 'check':53B 'cve':13A,16A 'cyber':2A,21B,28B,77C 'data':12A,60B 'disclosur':63C 'due':66C 'entri':46B 'follow':72C 'get':50B 'improp':5A,68C 'inform':57B,62C 'leak':8A 'linux':24B,32B,80C 'manipul':59B,65C 'nvd':45B 'past':51B 'per':43B 'product':73C 'proper':37B 'protect':3A,22B,29B,78C 'read':55B 'sensit':11A,56B,61C 'token':6A,39B,69C 'valid':7A,38B,70C 'window':26B,34B,81C","nicknames":[],"mitigations":[],"who_affected":"Teams running Acronis Cyber Protect 17 on Linux or Windows before build `42587`. The sources do not say which deployment roles or configurations are exposed, so unknown whether any group can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:27+00:00","kev":null,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss_by":"security@acronis.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-87102","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87102","severity":null,"published_at":"2026-10-28T11:17:27+00:00","modified_at":"2026-10-28T11:17:27+00:00","first_seen_at":"2026-10-28T11:32:34+00:00","fetched_at":"2026-10-28T11:32:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}