Acronis vendor intelligence

Acronis Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Acronis products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
2
Known exploited vulnerabilities affecting Acronis products
In CISA KEV
2
Records also listed in the official catalog
Beyond CISA KEV
0
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
Acronis KEVs with sensor-observed exploitation activity

Review Acronis exploitation against the products you run

Both exploited Acronis vulnerabilities tracked by Previdian are also listed in CISA KEV.

100%
Covered by CISA
0%
Beyond CISA
2
Product families

Attested Acronis vulnerabilities

2 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2026-87886

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux)...

Acronis Backup plugin for cPanel & WHM, Acronis Backup extension for Plesk, Acronis Backup plugin for DirectAdmin Confirmed In CISA 15 Sep 2026
CVE-2023-45249

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build...

Acronis Cyber Infrastructure Confirmed In CISA 29 Jul 2024

Showing 2 of 2 on this page (2 Acronis known exploited vulnerabilities).

Recurring weakness patterns

Use and incorrect default permissions account for two mapped occurrences across this Acronis KEV portfolio.

Browse all KEVs →