Acronis Backup default-permissions bug added to CISA's exploited list
On September 16, 2026, CISA added CVE-2026-87886, incorrect default permissions in Acronis Backup, to the Known Exploited Vulnerabilities catalog because of evidence it was being exploited.