CVE-2026-87095 Acronis CVE debrief

Who should care

Defenders responsible for Acronis Cyber Infrastructure deployments should assess exposure and apply remediation. They should review authorization checks and configurations, monitor for potential exploitation attempts, and track exceptions, retest remediated assets, and close the item only after evidence is documented.

Why it matters

CVE-2026-87095 is a critical vulnerability in Acronis Cyber Infrastructure, allowing sensitive information disclosure and manipulation due to improper authorization checks. Defenders should prioritize verifying exposure and applying remediation.

• Verify exposure in Acronis Cyber Infrastructure deployments
• Apply vendor-provided remediation to affected versions
• Review authorization checks and configurations

Technical summary

CVE-2026-87095 is a critical vulnerability in Acronis Cyber Infrastructure, allowing sensitive information disclosure and manipulation due to improper authorization checks. The vulnerability affects Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71. The vulnerability can be exploited by attackers to access and manipulate sensitive information, which can lead to unauthorized access and data breaches.

Defensive priority

Defenders should prioritize verifying exposure in Acronis Cyber Infrastructure deployments and applying vendor-provided remediation.

Recommended defensive actions

• Verify Acronis Cyber Infrastructure version and apply patches to affected versions
• Review authorization checks and configurations
• Monitor for potential exploitation attempts
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record and vendor advisory provide details on the sensitive information disclosure and manipulation vulnerability in Acronis Cyber Infrastructure. The vulnerability is caused by improper authorization checks, which allow attackers to access and manipulate sensitive information. The affected products are Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, and Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.