~/article/acronis-cpanel-backup-plugin-vulnerability-exploited-in-targeted-attacks-1v4rhd

critical2026-09-16 11:08 UTCSource: The Hacker News

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild. The vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions - Acronis Backup plugin for cPanel & WHM (Linux

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

CVE-2026-87886

Topics

cve linux

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/acronis-cpanel-backup-plugin-vulnerability-exploited-in-targeted-attacks-1v4rhd

2026-09-21 05:00 UTC[info]

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Referenced CVEs

Topics

This is what cymesh.net is for

Related

Gopass: Open-source command-line password manager for teams

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

Cisco Zero-Day Highlights API Endpoint Authentication Issues

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root