CVE-2026-87886Vulnerability
Acronis Backup Incorrect Default Permissions Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 3 independent sources · first reported by CISA advisories · last reported
Last reported 12 days ago
CISA KEVAdded 16 Sep 2026
Fix due 19 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
Fix due 19 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS0.2%
higher than 13% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 13% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
3 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2026-87886”
-
Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026)“CVE-2026-87886”
-
CISA Adds Two Known Exploited Vulnerabilities to Catalog“CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability”
Indicators reported together
named in the same reports- hxxps://www.ibm[.]com/support/pages/node/7287209in 1 report
- hxxps://www.ibm[.]com/support/pages/node/7287497in 1 report
- hxxps://www.ibm[.]com/support/pages/node/7287516in 1 report
Copy these 3 indicators · defanged
Also named with it: CVE-2026-76460, CVE-2026-87491, CVE-2025-39964, CVE-2026-53266, CVE-2026-76461, CVE-2026-58704, CVE-2025-39682, CVE-2023-54391, CVE-2026-65400, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880, CVE-2025-14923, CVE-2026-11541, CVE-2026-48710
Thanks — we review every report.