ZeusQA
Start free

Known exploited vulnerabilities

Acronis vulnerabilities attackers have used

Every Acronis vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Acronis vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2026-87886, added Sep 16, 2026. Backup has the most entries (1).

In KEV, all time
2
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

By product

Backup (1), Cyber Infrastructure (ACI) (1).

Every Acronis entry in CISA KEV

  1. CVE-2026-87886

    Added · due

    Acronis Backup Incorrect Default Permissions Vulnerability

    Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

  2. CVE-2023-45249

    Added · due

    Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

    Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works