Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-16 11:08 UTC
Importiert: 2026-09-22 11:01 UTC
CVSS: 7.8
Quelle-ID: thn_global
uid_hash: 4b9f8958565702e0b7f1c20dd3f8c1497dd5999c7a88ec81707cee31037c1081

The Hacker News

Inhalt

Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.

The vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -

Acronis Backup plugin for cPanel & WHM (Linux

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-87886	HIGH	7.8	HIGH	7.8			2026-09-17

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste