Acronis

Vulnerability activity for Acronis: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 5
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 6
Critical (CVSS 9+): 0
Exploited (CISA KEV): 1
With exploit code: 0

Last 365 days

CVEs: 9
Critical (CVSS 9+): 0
Exploited (CISA KEV): 1
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

7.8HighSep 16, 2026Acronis Backup Privilege escalationCVE-2026-87886Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.Added to KEV Sep 16, 2026Exploited
9.8CriticalJul 24, 2024Acronis Cyber Infrastructure (ACI)CVE-2023-45249Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.Added to KEV Jul 29, 2024 · 4 days after publicationExploited53% likelyExploit codeMetasploit · NucleiDetection

Recent

6.8MediumOct 28, 2026Acronis Cyber Protect 17 Crypto / certificateCVE-2026-87880Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
6.3MediumOct 28, 2026Acronis Cyber Protect 17CVE-2026-87878Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.
7.4HighOct 28, 2026Acronis Cyber Protect 17 Crypto / certificateCVE-2026-87103Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
7.4HighOct 28, 2026Acronis Cyber Protect 17 Crypto / certificateCVE-2026-87102Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
7.1HighOct 28, 2026Acronis Cyber Protect Cloud Agent Auth bypass / access controlCVE-2025-30414Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.
7.8HighSep 16, 2026Acronis Backup Privilege escalationCVE-2026-87886Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.Exploited
7.8HighApr 29, 2026Acronis DeviceLock DLP Memory corruptionCVE-2026-41952Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
7.8HighApr 29, 2026Acronis DeviceLock DLP Memory corruptionCVE-2026-41220Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.
6.7MediumApr 29, 2026Acronis DeviceLock DLP Privilege escalationCVE-2026-25852Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.
9.8CriticalJul 24, 2024Acronis Cyber Infrastructure (ACI)CVE-2023-45249Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.Exploited53% likelyExploit codeMetasploit · NucleiDetection

See every Acronis entry on the dashboard.