CVE-2026-87878

MediumCVSS 6.3

Published: 28/10/2026(UTC)Updated: 29/10/2026(UTC)Translated: 28/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

Linux binaries have the executable stack attribute enabled. The vulnerability affects Acronis Cyber Protect 17 (Linux) before build 42587.

Risk Assessment

An executable stack facilitates exploitation of other flaws, such as code injection and execution, increasing the risk of system compromise.

Recommendation

Update Acronis Cyber Protect 17 (Linux) to build 42587 or later.

Other vulnerabilities in Acronis Cyber Protect

See all

CVE-2026-87879Medium
Sensitive information disclosure occurs due to improper token validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87101Medium
Sensitive information disclosure occurs due to improper token validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87100Low
Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.
CVE-2026-87099Medium
A cross-site scripting (XSS) vulnerability occurs due to improper input validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87098Low
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87097Medium
Sensitive information disclosure occurs due to insufficiently protected credentials. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87880Medium
Sensitive information disclosure occurs due to missing SSL certificate verification affecting one component. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
CVE-2026-87103High
Acronis Cyber Protect 17 (Linux, Windows) before build 42587 contains a vulnerability due to improper token validation, leading to sensitive information disclosure and manipulation.
CVE-2026-87102High
Acronis Cyber Protect 17 (Linux, Windows) before build 42587 contains a vulnerability due to improper token validation, leading to sensitive information disclosure and manipulation.
CVE-2025-30414High
A local privilege escalation exists due to improper authentication. The vulnerability affects Acronis Cyber Protect Cloud Agent (Windows) before build 42569 and Acronis Cyber Protect 17 (Windows) before build 42587.

Original NVD description (English source)

Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS