Acronis vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20203
3. 20217
4. 202221
5. 202361
6. 202433
7. 202527
8. 202653

Known exploitedNewest addition to KEV first

• CVE-2026-87886

  Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build…

  Acronis · Acronis Backup plugin for cPanel & WHM

  ExploitedHigh7.8
• CVE-2023-45249

  Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61,…

  Acronis · Acronis Cyber Infrastructure

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-87879

  Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…

  Acronis · Acronis Cyber Protect 17

  Medium5.9
• CVE-2026-87878

  Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.

  Acronis · Acronis Cyber Protect 17

  Medium6.3
• CVE-2026-87102

  Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux,…

  Acronis · Acronis Cyber Protect 17

  High7.4
• CVE-2026-87100

  Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before…

  Acronis · Acronis Cyber Protect 17

  Low3.6
• CVE-2026-87099

  Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)…

  Acronis · Acronis Cyber Protect 17

  Medium5.7
• CVE-2025-30414

  Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569,…

  Acronis · Acronis Cyber Protect Cloud Agent

  High7.1
• CVE-2026-87098

  Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…

  Acronis · Acronis Cyber Protect 17

  Low3.1
• CVE-2026-87880

  Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: Acronis Cyber…

  Acronis · Acronis Cyber Protect 17

  Medium6.8
• CVE-2026-87103

  Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux,…

  Acronis · Acronis Cyber Protect 17

  High7.4
• CVE-2026-87101

  Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build…

  Acronis · Acronis Cyber Protect 17

  Medium6.2