{"id":"CVE-2026-87879","kind":"vulnerability","aliases":["CVE-2026-87879"],"related":[],"title":"Acronis Cyber Protect 17: token validation flaw leaks sensitive information","description":"Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.","summary":"Acronis Cyber Protect 17 on Linux and Windows does not validate tokens properly, which allows sensitive information to be disclosed. The sources do not say which data is exposed or what the attacker must send.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["acronis","backup","infrastructure","linux","windows"],"not_affected_if":[],"how_to_check":"- Check the installed Acronis Cyber Protect build number in the product's About or version view; the sources do not give a command.\n- unknown","fix":"- Move Acronis Cyber Protect 17 to build `42587` or later, per the affected-version note in the sources.\n- unknown","status":"open","published_at":"2026-10-28T11:17:28+00:00","first_seen_at":"2026-10-28T11:32:34+00:00","triaged_at":"2026-10-28T11:33:32+00:00","updated_at":"2026-10-28T11:33:32+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-28T11:33:32Z","model":"claude-haiku-5-5","output":{"fix":"- Move Acronis Cyber Protect 17 to build `42587` or later, per the affected-version note in the sources.\n- unknown","reach":"unknown","title":"Acronis Cyber Protect 17: token validation flaw leaks sensitive information","impact":"medium","summary":"Acronis Cyber Protect 17 on Linux and Windows does not validate tokens properly, which allows sensitive information to be disclosed. The sources do not say which data is exposed or what the attacker must send.","category":"infrastructure","nicknames":[],"who_cares":["acronis","backup","windows","linux"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Sensitive information may be readable by an attacker; exact data unknown.","analyst_note":"Check the NVD entry and the Acronis security advisory for the exposed data, required access, and whether the build number fixes it.","how_to_check":"- Check the installed Acronis Cyber Protect build number in the product's About or version view; the sources do not give a command.\n- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running Acronis Cyber Protect 17 on Linux or Windows at a build before `42587` are affected. The sources do not say which configurations or roles make an installation exposed, so the scope beyond the affected version is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000575,"input_tokens":3251,"output_tokens":500,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-87879':13A,16A '17':4A,25B,73C '42587':78C 'acroni':1A,17B,22B,70C 'affect':69C 'allow':36B 'attack':54B 'backup':18B 'build':77C 'cve':11A,14A 'cyber':2A,23B,71C 'data':48B 'disclos':41B 'disclosur':59C 'due':60C 'expos':50B 'flaw':7A 'follow':66C 'improp':62C 'inform':10A,38B,58C 'infrastructur':19B 'leak':8A 'linux':20B,27B,74C 'must':55B 'product':67C 'proper':34B 'protect':3A,24B,72C 'say':46B 'send':56B 'sensit':9A,37B,57C 'sourc':43B 'token':5A,33B,63C 'valid':6A,32B,64C 'window':21B,29B,75C","nicknames":[],"mitigations":[],"who_affected":"Teams running Acronis Cyber Protect 17 on Linux or Windows at a build before `42587` are affected. The sources do not say which configurations or roles make an installation exposed, so the scope beyond the affected version is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:28+00:00","kev":null,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security@acronis.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-87879","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87879","severity":null,"published_at":"2026-10-28T11:17:28+00:00","modified_at":"2026-10-28T11:17:28+00:00","first_seen_at":"2026-10-28T11:32:34+00:00","fetched_at":"2026-10-28T11:32:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}