---
id: "CVE-2026-87103"
kind: "vulnerability"
aliases: ["CVE-2026-87103"]
title: "Acronis Cyber Protect 17: improper token validation exposes sensitive data"
severity: "high"
cvss: 7.4
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["acronis-cyber-protect", "backup", "linux", "other", "windows"]
not_affected_if: []
published_at: "2026-10-28T11:17:27+00:00"
first_seen_at: "2026-10-28T11:32:34+00:00"
updated_at: "2026-10-28T11:33:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87103", "first_seen_at": "2026-10-28T11:32:34+00:00"}]
---

# Acronis Cyber Protect 17: improper token validation exposes sensitive data

Acronis Cyber Protect 17 builds before 42587 do not validate tokens properly, per the NVD entry. An attacker can read sensitive information and manipulate data through this flaw.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Acronis Cyber Protect 17 build number in the product console or agent about page.
- unknown for any other check; the sources do not say.

## Fix

- Upgrade Acronis Cyber Protect 17 to build `42587` or later.
- unknown for any other action; the sources do not say.

## Timeline

- 2026-10-28T11:32:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87103

## From the sources

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_