CVE-2026-87886

Vendor

Acronis

Product

Backup

CISA KEV

added 16 Sep 2026, due 19 Sep 2026 (43d overdue)

Weakness

CWE-276

Exposure class

Backup, Web platform, Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 69
   KEV CISA KEV 16 Sep 2026

   Acronis Backup Incorrect Default Permissions Vulnerability

   Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

   KEV · due 19 Sep 2026 (overdue) Fix available CVE-2026-87886 Acronis
2. 65
   CISA alert CISA 16 Sep 2026

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability…

   Exploited CVE-2026-76460CVE-2026-87886 Cisco Acronis