CVE-2026-87095

Summary

Improper authorization in Acronis Cyber Infrastructure allows unauthenticated attackers to read and modify sensitive data due to missing access controls on critical endpoints.

Exploitability

Exploitation requires network access to the affected appliance; no authentication or user interaction is needed, making it highly exploitable by remote attackers.

Blast radius

Successful exploitation could lead to full compromise of system confidentiality and integrity, enabling data theft or malicious configuration changes without detection.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Acronis Cyber Infrastructure (ACI) build 6.0.1-112, 6.1.1-64, or 6.2.1-71 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.