{"id":"CVE-2026-87095","title":"Sensitive information disclosure and manipulation due to improper authorization checks","summary":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvssSource":"cna","cwe":["CWE-863"],"vendor":"Acronis","product":"Acronis Cyber Infrastructure","affected":["cyber_infrastructure >= unspecified < 6.0.1-112","cyber_infrastructure >= unspecified < 6.1.1-64","cyber_infrastructure >= unspecified < 6.2.1-71"],"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T10:14:03.375Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87095","references":[{"url":"https://security-advisory.acronis.com/advisories/SEC-8128","label":"SEC-8128"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T10:46:55.416Z","slug":"CVE-2026-87095","body":"## Overview\n\nSensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.\n\n## Affected\n\n- `cyber_infrastructure >= unspecified < 6.0.1-112`\n- `cyber_infrastructure >= unspecified < 6.1.1-64`\n- `cyber_infrastructure >= unspecified < 6.2.1-71`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":50,"depthScoreParts":{"impact":50.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}