low · CVSS v3 3.3

CVE-2026-87096

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec…

Description

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

Scores

Severity
low
CVSS v2
3.2
CVSS v3
3.3
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

low

CVE-2026-98869

A logic error in the Linux kernel's BPF verifier on s390 architectures could allow incorrect zero-extension handling for 32-bit operations. This flaw may permit arbitrary values to be injected into the upper half of registers under specific verification path conditions. The issue is resolved by replacing dynamic liveness tracking with static register analysis.

View analysis

low

CVE-2026-104642

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor role and above to register attacker-chosen prices for existing products, which any visitor can then use to add those products to the cart at that price.

View analysis

low

CVE-2026-114236

storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

View analysis

low

CVE-2026-35501

Unbound DNS resolver versions 1.0.1 through 1.26.1 can incorrectly accept forged NSEC records when configured with a root trust anchor and an island‑of‑security zone, allowing a malicious actor to bypass DNSSEC validation. This flaw arises from legacy handling of DS and NSEC queries at the trust anchor apex. The vulnerability could lead to DNS spoofing or cache poisoning in misconfigured deployments.

View analysis