Acronis vulnerabilities
- Acronis has 104 CVE records published between 28 Oct 2023 and 28 Oct 2026, ranking #140 of 420 vendors on this site by that count.
- Of the 104 with a CVSS score, 36 (34.6%) are rated critical or high; 0 (0% of all) have no CVSS score.
- 2 vulnerabilities attributed to Acronis are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog; the most recent, CVE-2026-87886, was added on 16 Sep 2026.
- None of them is marked as known to be used in ransomware campaigns.
- For the 2 KEV entries with a published CVE record, the median time from CVE publication to KEV listing is 2 days.
Records are attributed to Acronis from the vendor named in the source records. About the data.
CVE records per year
Show data as a table
| Year | CVE records |
|---|---|
| 2017 | 1 |
| 2018 | 0 |
| 2019 | 0 |
| 2020 | 3 |
| 2021 | 7 |
| 2022 | 21 |
| 2023 | 61 |
| 2024 | 33 |
| 2025 | 27 |
| 2026 | 42 |
2026 is partial (through 28 Oct 2026), shown in a lighter bar.
| Year | Records | Critical | High | Critical or high | Not scored |
|---|---|---|---|---|---|
| 2026 | 42 | 5 | 14 | 45.2% | 0% |
| 2025 | 27 | 0 | 7 | 25.9% | 0% |
| 2024 | 33 | 2 | 7 | 27.3% | 0% |
| 2023 | 61 | 2 | 17 | 31.1% | 0% |
| 2022 | 21 | 0 | 2 | 33.3% | 71.4% |
| 2021 | 7 | 0 | 0 | — | 100% |
| 2020 | 3 | 0 | 3 | 100% | 0% |
| 2019 | 0 | 0 | 0 | — | — |
| 2018 | 0 | 0 | 0 | — | — |
| 2017 | 1 | 0 | 0 | — | 100% |
Source: CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026. About the data.
Exploited vulnerabilities in CISA's KEV catalog
| CVE | Product | Name | Added | Ransomware |
|---|---|---|---|---|
| CVE-2026-87886 | Backup | Acronis Backup Incorrect Default Permissions Vulnerability | 2026-09-16 | Unknown |
| CVE-2023-45249 | Cyber Infrastructure (ACI) | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | 2024-07-29 | Unknown |
Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.
Highest exploit-prediction scores (EPSS)
EPSS estimates the probability that a vulnerability is exploited in the next 30 days. These are the 10 highest-scoring Acronis records today.
| CVE | EPSS | Percentile | Severity | In KEV |
|---|---|---|---|---|
| CVE-2023-45249 | 53.3% | 99% | Critical | Yes |
| CVE-2022-3405 | 5.3% | 92.6% | Critical | No |
| CVE-2022-30995 | 3.3% | 88.3% | Critical | No |
| CVE-2023-41746 | 1.3% | 70.1% | High | No |
| CVE-2023-41748 | 1.3% | 70.1% | High | No |
| CVE-2023-44155 | 1.1% | 65.6% | Medium | No |
| CVE-2023-44156 | 1% | 64% | Medium | No |
| CVE-2023-44206 | 1% | 63.5% | High | No |
| CVE-2021-34800 | 1% | 62.3% | Not scored | No |
| CVE-2022-30990 | 0.9% | 60.2% | Not scored | No |
Source: FIRST Exploit Prediction Scoring System (EPSS), v2026.06.15, as of 28 Oct 2026; CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026; CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.