Live › vulnerability › CVE-2026-87880
Go to dashboardOne component of Acronis Cyber Protect 17 does not verify SSL certificates when connecting. A network attacker positioned between the agent and its server could read sensitive information sent over those connections.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 11:32 UTC. All times on this page are UTC.
Organizations running Acronis Cyber Protect 17 on Linux or Windows at a build before . The sources do not name the affected component or the exact connection path, so exposure depends on whether that component talks over an untrusted network. Teams not running this product can skip it.
42587No product ranges from the sources yet.
42587 or later, per the advisory's affected range.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
This page as .md · .json · in your agent: get_signal("CVE-2026-87880")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.