Medium WID-SEC-2026-4194 11 CVEs

Acronis Cyber Protect: Mehrere Schwachstellen

Published Oct 27, 2026 · Updated Oct 27, 2026 · de-DE

Vendor: Acronis Product: Cyber Protect Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.

Product

Acronis Cyber Protect ist eine umfassende Cybersecurity- und Datenschutzlösung, die Funktionen wie Virenschutz, Backup und Wiederherstellung, Schutz vor Ransomware und sicheres Online-Browsing in einem einzigen Paket bietet.

Vulnerabilities 11

High 7.4

CVE-2026-87102

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
High 7.4

CVE-2026-87103

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
High 7.1

CVE-2025-30414

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect C…

Acronis Acronis Cyber Protect Cloud Agent Acronis Cyber Protect 17

Oct 28, 2026
Medium 6.8

CVE-2026-87880

Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following pro…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
Medium 6.3

CVE-2026-87878

Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
Medium 6.2

CVE-2026-87101

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber P…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
Medium 5.9

CVE-2026-87879

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber P…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
Medium 5.7

CVE-2026-87099

Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
Medium 5.3

CVE-2026-87097

Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acro…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
Low 3.6

CVE-2026-87100

Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected:…

Acronis Acronis Cyber Protect 17

Oct 28, 2026
Low 3.1

CVE-2026-87098

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Prot…

Acronis Acronis Cyber Protect 17

Oct 28, 2026

Revision history

2026-10-27 #1
Initiale Fassung

References

Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-10003
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-10289
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-10681
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-11343
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-5613
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-6066
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-8648
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-8835
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-9425
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-9812
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-9813
Acronis Security Advisory vom 2026-10-27
https://security-advisory.acronis.com/SEC-9814