cyber_protect_17 vulnerabilities
CVEs whose affected-version data names the cyber_protect_17 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
11 CVEsRSS
CVE-2026-87101Medium· 6.2Sensitive information disclosure due to improper token validation
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87103High· 7.4Sensitive information disclosure and manipulation due to improper token validation
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87097Medium· 5.3Sensitive information disclosure due to insufficiently protected credentials
Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87880Medium· 6.8Sensitive information disclosure due to missing SSL certificate verification affecting one component
Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87100Low· 3.6Protection mechanism failure due to missing binary hardening in Linux executables
Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.
CVE-2026-87099Medium· 5.7Cross-site scripting (XSS) vulnerability due to improper input validation
Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87098Low· 3.1Sensitive information disclosure due to improper authorization
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87878Medium· 6.3Linux binaries have executable stack attribute enabled
Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.
CVE-2025-30414High· 7.1Local privilege escalation due to improper authentication
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.
CVE-2026-87102High· 7.4Sensitive information disclosure and manipulation due to improper token validation
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87879Medium· 5.9Sensitive information disclosure due to improper token validation
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.