Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis Issues Urgent Security Update for Backup Extensions Following Active Attacks

Acronis warns of a high-severity privilege escalation flaw (CVE-2026-87886) in its cPanel and Plesk backup plugins currently being exploited in the wild.

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the wild. [...]

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild. The vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions Acronis Backup plugin for cPanel & WHM (Linux

Acronis Patches Exploited Vulnerability in cPanel Backup Plugin

Acronis has patched CVE-2026-87886, an exploited privilege escalation vulnerability in the Backup plugin for cPanel & WHM.

Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)

A Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis’ backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery company warns. “Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments,” Acronis said in the security advisory published on Tuesday. There’s currently …