Skip to content
OpenAdvisories
High · 7.8 Known exploited CVE-2026-87886 EUVD-2026-82595GHSA-hrq3-qgq7-jm9x

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (L…

Published Sep 17, 2026 · Updated Sep 18, 2026 · Assigned by Acronis

Description

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Affected products

VendorProductAffectedFixed
Acronis Acronis Backup plugin for cPanel & WHM unspecified – < 1.9.3.1021 1.9.3.1021
Acronis Acronis Backup extension for Plesk unspecified – < 1.8.11.638 1.8.11.638
Acronis Acronis Backup plugin for DirectAdmin unspecified – < 1.2.3.238 1.2.3.238

References