Firetruck

CVE-2026-87886

KEV
Updated Sep 18, 2026 · PUBLISHED
View KEV entry →

Description

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Acronis Backup extension for PleskAcronis / Acronis Backup extension for Plesk>= unspecified, < 1.8.11.638affected
Acronis Backup plugin for cPanel & WHMAcronis / Acronis Backup plugin for cPanel & WHM>= unspecified, < 1.9.3.1021affected
Acronis Backup plugin for DirectAdminAcronis / Acronis Backup plugin for DirectAdmin>= unspecified, < 1.2.3.238affected