{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Acronis vulnerabilities","home_page_url":"https://patchfirst.co/vendor/acronis/","feed_url":"https://patchfirst.co/feed/vendor/acronis.json","description":"New and newly exploited Acronis CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-87886","url":"https://patchfirst.co/cve/CVE-2026-87886/","title":"CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability","content_text":"Acronis · Backup. In CISA KEV since 2026-09-16. ENISA EUVD lists it as exploited. EPSS 0.2% (higher than 14.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 56.3 of 100.","summary":"Acronis Backup Incorrect Default Permissions Vulnerability","date_published":"2026-09-17T00:00:00.000Z","date_modified":"2026-09-18T19:29:35.000Z","tags":["kev","T1078","T1068"],"_patchfirst":{"reason":"published","priority":56.3,"kev":{"dateAdded":"2026-09-16","ransomware":false},"epss":{"score":0.00233,"percentile":0.14253},"cvss":{"score":7.8,"severity":"HIGH","version":"3.0"},"vendor":"Acronis","product":"Backup","techniqueIds":["T1078","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-45249#kev","url":"https://patchfirst.co/cve/CVE-2023-45249/","title":"[KEV] CVE-2023-45249: Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","content_text":"Acronis · Cyber Infrastructure (ACI). In CISA KEV since 2024-07-29. ENISA EUVD lists it as exploited. EPSS 53.3% (higher than 99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 69.7 of 100.","summary":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","date_published":"2024-07-29T00:00:00.000Z","date_modified":"2026-06-17T06:28:32.000Z","tags":["kev","public-exploit","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":69.7,"kev":{"dateAdded":"2024-07-29","ransomware":false},"epss":{"score":0.53255,"percentile":0.98982},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Acronis","product":"Cyber Infrastructure (ACI)","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}