{"id":"CVE-2026-87096","title":"Sensitive information disclosure and manipulation due to improper authorization checks","summary":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1…","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-863"],"vendor":"Acronis","product":"Acronis Cyber Infrastructure","affected":["cyber_infrastructure >= unspecified < 6.0.1-112","cyber_infrastructure >= unspecified < 6.1.1-64","cyber_infrastructure >= unspecified < 6.2.1-71"],"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T10:14:44.298Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-87096","references":[{"url":"https://security-advisory.acronis.com/advisories/SEC-8129","label":"SEC-8129"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T10:46:55.416Z","slug":"CVE-2026-87096","body":"## Overview\n\nSensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.\n\n## Affected\n\n- `cyber_infrastructure >= unspecified < 6.0.1-112`\n- `cyber_infrastructure >= unspecified < 6.1.1-64`\n- `cyber_infrastructure >= unspecified < 6.2.1-71`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}