Acronis Cyber Infrastructure Has Critical Auth Bypass Vulnerability CVE-2026-87095
A critical flaw in Acronis Cyber Infrastructure allows unauthorized access and data manipulation across multiple software versions.
Key points
- CVE-2026-87095 is rated Critical with a CVSS score of 9.1.
- The flaw stems from improper authorization checks leading to sensitive information disclosure.
- Acronis Cyber Infrastructure builds prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 are affected.
The National Vulnerability Database has published details for CVE-2026-87095, a critical security flaw in Acronis Cyber Infrastructure. This vulnerability allows attackers to bypass authorization checks, potentially exposing sensitive data and manipulating system configurations.
At a glance
- CVE
- CVE-2026-87095
- Product
- Acronis Cyber Infrastructure
- CVSS
- 9.1 Critical
- Weakness
- incorrect authorization
- Exploited
- No known exploitation
The issue is classified as Critical with a CVSS base score of 9.1. According to the NVD record, the weakness falls under CWE-863, which involves improper authorization checks. This means the software fails to properly verify user permissions before granting access to protected resources or actions.
Context and Background
The vulnerability enables both sensitive information disclosure and data manipulation. Attackers who exploit this flaw could potentially read confidential data stored within the infrastructure platform. They may also be able to alter system settings or user data without proper credentials.
The National Vulnerability Database lists the specific technical weaknesses associated with this entry. The primary concern is the lack of adequate authorization validation. This type of flaw often leads to privilege escalation or unauthorized access to administrative functions.
Who Is Affected
Acronis Cyber Infrastructure is the specific product impacted by this vulnerability. The flaw exists in versions that have not yet reached specific build numbers. Organizations using older builds of the software are at risk of exploitation.
The affected versions include Acronis Cyber Infrastructure before build 6.0.1-112. It also impacts versions before build 6.1.1-64. Additionally, builds prior to 6.2.1-71 contain this vulnerability. Users running any of these specific build numbers or earlier are exposed.
What should you do?
Administrators should immediately audit their Acronis Cyber Infrastructure installations. Check the current build number against the affected versions listed in the NVD record. If the installed version is before the specified builds, the system is vulnerable.
Monitor network traffic for unusual activity that might indicate exploitation. Look for unauthorized access attempts or unexpected data changes. Restrict network access to the infrastructure management interface where possible.
What to do and how to stay safe
- Verify the current build version of your Acronis Cyber Infrastructure installation.
- Compare your version against the affected builds: 6.0.1-112, 6.1.1-64, and 6.2.1-71.
- Monitor logs for unauthorized access attempts or configuration changes.
- Restrict network access to management interfaces until an update is available.
Step-by-step guide: Risk-Based Vulnerability Management: Prioritize Fixes by Actual Danger
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
