AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AcronisCVE-2026-87886

Acronis Backup: privilege escalation

Acronis

CVE-2026-87886 · Published Sep 17, 2026 · updated Sep 18, 2026

High7.8
Fix: upgrade to plugin for cPanel & WHM 1.9.3.1021 or later (3 fixed versions below)
Acronis advisory

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Affected versions

PackageAffectedFixed in
Acronis Backup extension for Plesk
Product
< 1.8.11.6381.8.11.638
Acronis Backup plugin for DirectAdmin
Product
< 1.2.3.2381.2.3.238
Acronis Backup plugin for cPanel & WHM
Product
< 1.9.3.10211.9.3.1021
Details and references
CVSS 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-276

More Acronis advisories

All Acronis
Low 3.3Oct 21Acronis Cyber Infrastructure: information disclosureCVE-2026-87096fixed in 6.0.1-112 +2Critical 9.1Oct 21Acronis Cyber Infrastructure: information disclosureCVE-2026-87095fixed in 6.0.1-112 +2