CVE-2026-87886 actively exploited: Acronis Backup Incorrect Default Permissions Vulnerability

CISA added CVE-2026-87886, an incorrect default permissions in Acronis Backup, to its Known Exploited Vulnerabilities catalogue. It could allow for privilege escalation. Federal agencies must remediate by September 19, 2026.