AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

AcronisCVE-2026-87095

Acronis Cyber Infrastructure: information disclosure

Acronis

CVE-2026-87095 · Published Oct 21, 2026 · updated Oct 30, 2026

Critical9.1
Fix: upgrade to 6.0.1-112 or later (3 fixed versions below)
Acronis advisory

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

Affected versions

PackageAffectedFixed in
Acronis Cyber Infrastructure
Product
< 6.0.1-1126.0.1-112
< 6.1.1-646.1.1-64
< 6.2.1-716.2.1-71
Details and references
CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863

More Acronis advisories

All Acronis
Low 3.3Oct 21Acronis Cyber Infrastructure: information disclosureCVE-2026-87096fixed in 6.0.1-112 +2High 7.8Sep 17Acronis Backup: privilege escalationCVE-2026-87886fixed in plugin for cPanel & WHM 1.9.3.1021 +2