THREATOPS

THREAT OPS › CVEs › CVE-2026-87886

CVE-2026-87886 — Acronis Backup Incorrect Default Permissions Vulnerability

CISA KEVExploited: confirmedAcronis

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

Vulnerability details

Affected productsBackup
KEV remediation due2026-09-19

Related reporting

CISA Adds Two Known Exploited Vulnerabilities to Catalogcisa_advisories
[CISA KEV] CVE-2026-87886 — Acronis Backup: Acronis Backup Incorrect Default Permissions Vulnerabilitycisa_kev
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacksthehackernews