{"schema_version":1,"title":"Acronis vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Acronis: 0 in the last 7 days and 1 in the last 90 days, 2 of them critical and 2 exploited in the wild. The most recent, CVE-2026-87886, was published on 17 September 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/acronis","json_url":"https://junglewise.ai/threats/vendors/acronis.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/acronis","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":7,"all_time":13,"critical":2,"exploited":2,"last_7_days":0,"last_30_days":1,"last_90_days":1,"last_365_days":12},"latest":[{"cve":"CVE-2026-87886","cvss":7.8,"epss":0.0023,"slug":"cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk","title":"Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Li","severity":"critical","exploited":true,"published_at":"2026-09-17T23:18:53.763+00:00","url":"https://junglewise.ai/threats/cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk"},{"cve":"CVE-2026-50033","cvss":7.3,"slug":"cve-2026-50033-acronis-devicelock-dlp-local-privilege-escalation-via-dll","title":"Acronis DeviceLock DLP local privilege escalation via DLL hijacking","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:21.89+00:00","url":"https://junglewise.ai/threats/cve-2026-50033-acronis-devicelock-dlp-local-privilege-escalation-via-dll"},{"cve":"CVE-2026-44682","cvss":7.3,"slug":"cve-2026-44682-acronis-devicelock-dlp-local-privilege-escalation-via-dll","title":"Acronis DeviceLock DLP local privilege escalation via DLL hijacking","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:21.557+00:00","url":"https://junglewise.ai/threats/cve-2026-44682-acronis-devicelock-dlp-local-privilege-escalation-via-dll"},{"cve":"CVE-2026-44609","cvss":7.3,"slug":"cve-2026-44609-acronis-devicelock-dlp-local-privilege-escalation-via-exe","title":"Acronis DeviceLock DLP local privilege escalation via EXE hijacking","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:21.31+00:00","url":"https://junglewise.ai/threats/cve-2026-44609-acronis-devicelock-dlp-local-privilege-escalation-via-exe"},{"cve":"CVE-2026-42061","cvss":7.3,"slug":"cve-2026-42061-acronis-devicelock-dlp-local-privilege-escalation-in-child","title":"Acronis DeviceLock DLP local privilege escalation in child processes","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:20.497+00:00","url":"https://junglewise.ai/threats/cve-2026-42061-acronis-devicelock-dlp-local-privilege-escalation-in-child"},{"cve":"CVE-2026-41952","cvss":7.8,"epss":0.0002,"slug":"cve-2026-41952-acronis-windows-agents-local-privilege-escalation-via-improper","title":"Acronis Windows Agents local privilege escalation via improper input validation","severity":"high","exploited":false,"published_at":"2026-04-29T15:16:06.417+00:00","url":"https://junglewise.ai/threats/cve-2026-41952-acronis-windows-agents-local-privilege-escalation-via-improper"},{"cve":"CVE-2026-41220","cvss":7.8,"epss":0.0002,"slug":"cve-2026-41220-acronis-devicelock-dlp-and-cyber-protect-cloud-agent-privilege","title":"Acronis DeviceLock DLP and Cyber Protect Cloud Agent privilege escalation","severity":"high","exploited":false,"published_at":"2026-04-29T15:16:05.95+00:00","url":"https://junglewise.ai/threats/cve-2026-41220-acronis-devicelock-dlp-and-cyber-protect-cloud-agent-privilege"},{"cve":"CVE-2026-25852","cvss":6.7,"epss":0.0001,"slug":"cve-2026-25852-acronis-devicelock-dlp-privilege-escalation-via-dll-hijacking","title":"Acronis DeviceLock DLP privilege escalation via DLL hijacking","severity":"medium","exploited":false,"published_at":"2026-04-29T15:16:05.313+00:00","url":"https://junglewise.ai/threats/cve-2026-25852-acronis-devicelock-dlp-privilege-escalation-via-dll-hijacking"},{"cve":"CVE-2026-33092","cvss":7.8,"epss":0.0001,"slug":"cve-2026-33092-acronis-true-image-local-privilege-escalation-via-environment","title":"Acronis True Image local privilege escalation via environment variables","severity":"high","exploited":false,"published_at":"2026-04-10T14:16:34.88+00:00","url":"https://junglewise.ai/threats/cve-2026-33092-acronis-true-image-local-privilege-escalation-via-environment"},{"cve":"CVE-2026-33271","cvss":6.7,"epss":0.0009,"slug":"cve-2026-33271-acronis-true-image-local-privilege-escalation-via-insecure-folder","title":"Acronis True Image local privilege escalation via insecure folder permissions","severity":"medium","exploited":false,"published_at":"2026-04-02T18:16:27.903+00:00","url":"https://junglewise.ai/threats/cve-2026-33271-acronis-true-image-local-privilege-escalation-via-insecure-folder"},{"cve":"CVE-2026-28728","cvss":6.7,"epss":0.001,"slug":"cve-2026-28728-acronis-true-image-dll-hijacking-privilege-escalation","title":"Acronis True Image DLL hijacking privilege escalation","severity":"medium","exploited":false,"published_at":"2026-04-02T18:16:27.26+00:00","url":"https://junglewise.ai/threats/cve-2026-28728-acronis-true-image-dll-hijacking-privilege-escalation"},{"cve":"CVE-2026-27774","cvss":6.7,"epss":0.001,"slug":"cve-2026-27774-acronis-true-image-dll-hijacking-privilege-escalation","title":"Acronis True Image DLL hijacking privilege escalation","severity":"medium","exploited":false,"published_at":"2026-04-02T18:16:26.93+00:00","url":"https://junglewise.ai/threats/cve-2026-27774-acronis-true-image-dll-hijacking-privilege-escalation"},{"cve":"CVE-2023-45249","cvss":9.8,"slug":"cve-2023-45249-acronis-cyber-infrastructure-aci-insecure-default-password","title":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-45249-acronis-cyber-infrastructure-aci-insecure-default-password"}],"vendor":{"hub":true,"name":"Acronis","slug":"acronis","homepage":"https://www.acronis.com","description":"Software company providing backup, disaster recovery, and cyber protection solutions.","url":"https://junglewise.ai/threats/vendors/acronis"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2023-45249","cvss":9.8,"slug":"cve-2023-45249-acronis-cyber-infrastructure-aci-insecure-default-password","title":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-45249-acronis-cyber-infrastructure-aci-insecure-default-password"},{"cve":"CVE-2026-87886","cvss":7.8,"epss":0.0023,"slug":"cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk","title":"Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Li","severity":"critical","exploited":true,"published_at":"2026-09-17T23:18:53.763+00:00","url":"https://junglewise.ai/threats/cve-2026-87886-acronis-backup-privilege-escalation-in-cpanel-whm-and-plesk"},{"cve":"CVE-2026-41952","cvss":7.8,"epss":0.0002,"slug":"cve-2026-41952-acronis-windows-agents-local-privilege-escalation-via-improper","title":"Acronis Windows Agents local privilege escalation via improper input validation","severity":"high","exploited":false,"published_at":"2026-04-29T15:16:06.417+00:00","url":"https://junglewise.ai/threats/cve-2026-41952-acronis-windows-agents-local-privilege-escalation-via-improper"},{"cve":"CVE-2026-41220","cvss":7.8,"epss":0.0002,"slug":"cve-2026-41220-acronis-devicelock-dlp-and-cyber-protect-cloud-agent-privilege","title":"Acronis DeviceLock DLP and Cyber Protect Cloud Agent privilege escalation","severity":"high","exploited":false,"published_at":"2026-04-29T15:16:05.95+00:00","url":"https://junglewise.ai/threats/cve-2026-41220-acronis-devicelock-dlp-and-cyber-protect-cloud-agent-privilege"},{"cve":"CVE-2026-33092","cvss":7.8,"epss":0.0001,"slug":"cve-2026-33092-acronis-true-image-local-privilege-escalation-via-environment","title":"Acronis True Image local privilege escalation via environment variables","severity":"high","exploited":false,"published_at":"2026-04-10T14:16:34.88+00:00","url":"https://junglewise.ai/threats/cve-2026-33092-acronis-true-image-local-privilege-escalation-via-environment"},{"cve":"CVE-2026-50033","cvss":7.3,"slug":"cve-2026-50033-acronis-devicelock-dlp-local-privilege-escalation-via-dll","title":"Acronis DeviceLock DLP local privilege escalation via DLL hijacking","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:21.89+00:00","url":"https://junglewise.ai/threats/cve-2026-50033-acronis-devicelock-dlp-local-privilege-escalation-via-dll"},{"cve":"CVE-2026-44682","cvss":7.3,"slug":"cve-2026-44682-acronis-devicelock-dlp-local-privilege-escalation-via-dll","title":"Acronis DeviceLock DLP local privilege escalation via DLL hijacking","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:21.557+00:00","url":"https://junglewise.ai/threats/cve-2026-44682-acronis-devicelock-dlp-local-privilege-escalation-via-dll"},{"cve":"CVE-2026-44609","cvss":7.3,"slug":"cve-2026-44609-acronis-devicelock-dlp-local-privilege-escalation-via-exe","title":"Acronis DeviceLock DLP local privilege escalation via EXE hijacking","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:21.31+00:00","url":"https://junglewise.ai/threats/cve-2026-44609-acronis-devicelock-dlp-local-privilege-escalation-via-exe"},{"cve":"CVE-2026-42061","cvss":7.3,"slug":"cve-2026-42061-acronis-devicelock-dlp-local-privilege-escalation-in-child","title":"Acronis DeviceLock DLP local privilege escalation in child processes","severity":"high","exploited":false,"published_at":"2026-06-03T20:16:20.497+00:00","url":"https://junglewise.ai/threats/cve-2026-42061-acronis-devicelock-dlp-local-privilege-escalation-in-child"},{"cve":"CVE-2026-28728","cvss":6.7,"epss":0.001,"slug":"cve-2026-28728-acronis-true-image-dll-hijacking-privilege-escalation","title":"Acronis True Image DLL hijacking privilege escalation","severity":"medium","exploited":false,"published_at":"2026-04-02T18:16:27.26+00:00","url":"https://junglewise.ai/threats/cve-2026-28728-acronis-true-image-dll-hijacking-privilege-escalation"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"Acronis DeviceLock DLP","slug":"devicelock-dlp","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/devicelock-dlp"},{"name":"Acronis True Image","slug":"true-image","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/true-image"}]}