Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

2 result(s)

Export this search: RSS · CSV · STIX

CVE-2026-87886 High · 7.8 KEV CWE-276 Sep 17, 2026

Acronis Backup Incorrect Default Permissions Vulnerability

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

CVE-2023-45249 Critical · 9.8 KEV Urgent · 79 Public exploit CWE-1393 Jul 24, 2024

Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.