Brand
Acronis: actively exploited vulnerabilities
2 vulnerabilities in Acronis products (Backup, Cyber Infrastructure (ACI)) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: September 16, 2026.
-
1 vulnerability added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
1 added in the last 30 days
By category
Add just one Acronis category to your radar, or open its page.
- Backup, storage and NAS 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Acronis product (Backup, Cyber Infrastructure (ACI)…) rather than the whole brand.
- Backup1 vulnerability, Backup and NAS
- Cyber Infrastructure (ACI)1 vulnerability, Backup and NAS
Name used by CISA: Acronis. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Acronis list.
- Rank 1
Acronis BackupCVE-2026-87886
Acronis Backup Incorrect Default Permissions Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 7.8high
Added Sep 16, 2026
- Rank 2
Acronis Cyber Infrastructure (ACI)CVE-2023-45249
Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
CVSS severity 9.8critical
Added Jul 29, 2024
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.