Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Backup and cyber recovery · in CISA KEV

Acronis in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 2 entries for Acronis as of catalog version 2026.11.06, released November 6, 2026. The newest was added September 16, 2026, and the latest federal due date is September 19, 2026.

Updated

entries in the catalog
2
newest addition
September 16, 2026
latest federal due date
September 19, 2026
marked known ransomware use
0

Directory record

Website
www.acronis.com
Categories
Backup and cyber recovery (primary), EDR and XDR, MDR and managed SOC, SaaS security posture
Headquarters
HQ not established
Founded
2003
Ownership
Ownership not established
Company record
Acronis on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Acronis”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added September 16, 2026

    CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability

    Backup

    Due September 19, 2026

  2. Added July 29, 2024

    CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

    Cyber Infrastructure (ACI)

    Due August 19, 2024

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Daily briefing · October 17, 2026

    Acronis Names Gerald Caron Chief Information Security Officer

  2. Daily briefing · October 14, 2026

    Acronis Appoints Gerald Caron as Chief Information Security Officer

  3. Weekly archive · Sep 14 – Sep 20, 2026

    Acronis Backup plugin flaw exploited against cPanel and WHM servers

  4. Weekly archive · Jul 29 – Aug 4, 2024

    CISA Flags ServiceNow and Acronis Bugs as Actively Exploited

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Acronis, published November 8, 2026