Acronis Backup Plugin Local Privilege Escalation Vulnerability CVE-2026-87886

[Eyal Estrin]

Local privilege escalation due to insecure file permissions
https://security-advisory.acronis.com/advisories/SEC-10986

Acronis Backup plugin for cPanel & WHM version 1.9.3 HF3
https://security-advisory.acronis.com/updates/UPD-2609-3d72-20a7

Acronis warns of actively exploited flaw in its cPanel backup plugin
https://www.bleepingcomputer.com/news/security/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin/

Eyal Estrin
Author | Cloud Architect | AWS • Azure • GCP Insights
Social: @eyalestrin
Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com