---
id: "CVE-2026-87102"
kind: "vulnerability"
aliases: ["CVE-2026-87102"]
title: "Acronis Cyber Protect 17: improper token validation leaks and alters sensitive data"
severity: "high"
cvss: 7.4
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["acronis-cyber-protect", "backup", "linux", "other", "windows"]
not_affected_if: []
published_at: "2026-10-28T11:17:27+00:00"
first_seen_at: "2026-10-28T11:32:34+00:00"
updated_at: "2026-10-28T11:33:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87102", "first_seen_at": "2026-10-28T11:32:34+00:00"}]
---

# Acronis Cyber Protect 17: improper token validation leaks and alters sensitive data

Acronis Cyber Protect 17 on Linux and Windows does not properly validate tokens before build 42587, per the NVD entry. An attacker who gets past that check can read sensitive information and manipulate data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Acronis Cyber Protect 17 build number in the product's About or version screen; unknown whether the sources give another method.

## Fix

- Update Acronis Cyber Protect 17 to build `42587` or later; the sources give no further remediation steps.

## Timeline

- 2026-10-28T11:32:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87102

## From the sources

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_